HT201670 Question about cropping in negative space on Aperture

I have a question about cropping on aperture. I would like to print a photo that is 6 x 10 inches. No photo company prints this size, so I was going to print 8 x 10 and physical cut out the extra space. Unfortunately my photo is already zoomed in and i can't figure out a way to crop and include negative space. Is there a way to do it on aperture. Should I use a different software program. And when i print to Wallgreens or shutterfly, they just strech or crop the image even further. Sould I be using a better printing company?
Thanks!

You can add blank areas to your image by printing the image to a new image:
Select the image in Aperture and use "File > Print".
Then set up a 10x8 paper size and disable the "Crop to fill" option.
Set the margins to zero inches.
Select to print to PDF.
In the "Print" dialog select to save the PDF as an image file (jpeg, tiff)
Or use an external editor to add borders to your image.

Similar Messages

Probably a stupid question about cropping a video..

OK, so I shot an interview with a black background and once I went to edit it, I noticed a red object in the far right corner. Is there a way I can add black over this object or crop it out? I know this is a stupid question, but I'm new to video and editing in general so I thought it wouldn't hurt to ask.

There are several ways to accomplish what you want.
KGCW has talked about the Crop Effect.
Depending on exactly where the object is, and whether the camera was locked down, it might be possible to duplicate your Clip, place it above your initial Clip, then offset it a bit (Motion>Position), with the Fixed Effect>Motion>Position, and then apply the Garbage Matte to that offset duplicate, effectively Cropping out everything, but a small "patch" from the existing background. Note: if the edges of that Garbage Matte are too hard for you, you could create a soft-edged Track Matte, and use that to hold out the rest of the offset duplicate.
Another method, and depending on where, and how large the offending item is, would be to go to the Fixed Effect>Motion, and use Motion>Scale to increase the size of the Clip (do not do too much Scale, or quality will suffer). You might also need to do a bit of Motion>Position, to get that red object behind the Video's Frame Size. This will effectively Crop the object.
Good luck,
Hunt

Backing up to external drive, and questions about "clearing up" hd space..?

iPhoto 6. Specs are below.
I have about 7,000 photos, and I have to clear out my hd to create more space.
I have "backed-up" my hd using "super duper" and an external firewire seagate pro drive and now need to clear out space on the internal drive on my G4.
Here are my questions/concerns:
How do I go about deleting my photos off of my internal hd?
I want to continue to use iphoto, but need to delete my current photos from it, in order to free up space.
Will I be able to get access to this drive in, say 10 years from now?
Will it be safe to store in the closet?
When I go to back-up iphoto, will it add my "new" pictures to the old pictures I saved?
My concerns are longevity, and to be able to access these in the future.
Should I be looking at another process? Back-up to DVD?
Thanks for your help!!!!
Feel free to ask me questions as well. These are very important photos, actually ANYONE'S photos are important......just want them safe for the future.

jp6940
You can run an entire library from that external disk:
1. Quit iPhoto
2. Copy the iPhoto Library Folder as an entity from your Pictures Folder to the External Disk.
3. Hold down the option (or alt) key while launching iPhoto. From the resulting menu select 'Choose Library' and navigate to the new location. From that point on this will be the default location of your library.
4. Test the library and when you're sure all is well, trash the one on your internal HD to free up space.
Now, when you add new pics, that's where they will go - obviously, as long as the disk is attached to your Mac and not in the closet
The longevity of storage is a matter of some debate. Optical media (CD & DVD) are rated in years, but none have been around long enough to know if those ratings are accurate. My solution to that problem is to burn a copy of my library to DVD twice a year, so that gets renewed every six months or so. I also upload my library to FLICKR.
I guess the point of backing up is that it's an ongoing process, not a single event.
Regards
TD

Question about crop

Hello. When i use my crop tool to extend my canvas a bit - I got new areas in white colour. Sadly, but I can't find a way to make all new areas to be black or other colours. Can you please advice me how to manage crop "default" colour?
Thank you for help.

Paolo means the background of the "Tools Palette", you can change it's backgroundcolor also without a picture opened.

Question about IMovie and Disk Space

Does iMovie have a cache or somewhere that it keeps stray files? I've noticed that sometimes when I empty the trash, I don't get my disk space back. I'm not quite sure why. I also read somewhere on these boards that iDVD uses double the size of your project in order to burn your movie. Do you get that space back or is there something I need to clean off from that. I bought an 80G MacBook 2 weeks ago and it appears that even that isn't big enough for me - sheesh.
Thanks
MacBook Mac OS X (10.4.7) 80G; 1.5M ram

Hello Stazya,
you have encountered iMovies non-destructive editing feature. A clip is only eliminated completely from the trash when no part of it is in your timeline any longer.
Video editing requires a lot of disk space (approx. 13 GB for 1 hr of DV video), so you might want to look at an external hard drive with firewire connection for storage. The other thing is not to import hours of video at a time.
iDVD requires that you have at least 15 GB of free disk space in order to create your DVD (it needs the space for the growing Temp file). The best way to proceed is to create a disk image of your DVD instead of burning directly to disc. When the disk image has been created successfully, you can delete the iDVD project and thus regain disk space.
hope this helps
mish

Question about cropping multiple tracks at the same time

Ok, here is the situation. My band jams reguarly, and I am recording 8 tracks concurrently.... each instrument gets their own mic/input.... typical band fare.
The recording will last a solid 45-60 minutes before we break. In the meantime, there is plenty of downtime, and multiple songs.
After the jam, I like to cut out the crap, bad takes, etc....
I do this by editing the waveform of each track individually, selecting the 'good region'.... copying the section ... and pasting into a new track... I repeat this 8 times... once for each track....
I then mute the original 8 tracks, move all the clips to timecode 0 and export to disk....
Needless to say, this is very, very time consuming, and I would like some input about a better way to do this.
Is it possible to select the same region across multiple tracks and copy/paste them into several new tracks? Or is it possible to define the 'playable region' of a larger region so that when I export, I am only exporting the region I am interested in?
Ultimately, I want to produce an exported .m4a for each 'good take' which is nothing more than a subset of the larger 60 minute take....

Have you tried selecting all tracks, then split at the beginning and ending of the "good take" then copy and paste it into a new GB file?

Question about setting up a workstation with Aperture 2

hello, I hope I will get some help from here.
I guess first I should list the things I have, this will make it easier. I have a Macbook Pro with 10.5.6, a Samsung 24" monitor, Aperture 2, Photoshop CS4, CANON Pro9000 Printer, and Pantone Huey Screen calibrator.
So I already have both my screen (macbook Pro's and Samsung's) calibrated. My question is about how to correctly set up my printer.
I went on Canon's website and try to download the driver for the CANON printer, But I see there is 3 different version for the driver, i am not sure which one to choose. One is for 10.3.9 and above, one is for OSX CUP (which i donno what it means).
and do I need to install any of the canon software or plug-ins? I thought the printer color profile is in the driver as well. and aperture should pick that up fine. but for max quality printing, am i better off with the canon software? if so which one should i USE? Easy Photo Printing EX or Easy Photo Printing PRO?
last... I guess it will be nice if someone can point me the right steps to make a print after I have done everything I want to in Aperture. if you guys can give me a step by step guides for printing from Aperture 2 to Canon Pro9000 with Canon Photo Paper Pro II. and is photoshop is must have in the printing process? I really would love to stick with Aperture as much as possible. but again, quality go first...
Thank you for reading my post, and thank you even more for replying.

Challenging, yes, here is a link to a podcast on the O'Reilly website, hope this helps, I found it very useful. I actually subscribe to the podcast (via itunes) and find that there are some great topics.
http://digitalmedia.oreilly.com/pub/a/oreilly/digitalmedia/2007/02/13/insideaperturepodcast-9.html?page=last&x-maxdepth=0
Joe Schorr on Color Management in Aperture
Inside Aperture Podcast 9
by Derrick Story
02/13/2007
Joe Schorr, Apple Senior Product Manager for Aperture, covers color management in Aperture 1.5.2. He discusses the three basic areas that photographers must address in order to have consistent color throughout the workflow: Screen calibration, correct settings in the print dialog box, and adding profiles to exported images. There are some nice tips in this chat, including how to use on-screen proofing in Aperture. Derrick Story interviews Joe in this exclusive O'Reilly Media podcast. (Inside Aperture, Feb. 13, 2007: 18 minutes, 18 seconds).

HT201364 Hello ! i have a question about my Hard's Disc storage space. I have Mac book Pro 11" Retina with hard disk 120 GB . I want to make this update but its impossible because of no free space. And now i want to ask. Its 120 GB full space but i dont k

Hello ! i have a question about my Hard's Disc storage space. I have Mac book Pro 11" Retina with hard disk 120 GB . I want to make this update but its impossible because of no free space. And now i want to ask. Its 120 GB full space but i dont know how. It tells me lets say i have 30 GB movies but i dont have anything ! Can you help me with any way ? If i can do something to see what movies let's say means !
Thank you !!

Hope this helps.
1. Empty Trash.
    http://support.apple.com/kb/PH10677
2. Start up in Safe Mode
    http://support.apple.com/kb/PH11212
3. Delete "Recovered Messages", if any.
    Hold the option key down and click "Go" menu in the Finder menu bar.
    Select "Library" from the dropdown.
    Library > Mail > V2 > Mailboxes
    Delete "Recovered Messages", if any.
    Empty Trash. Restart.
4. Repair Disk
    Steps 1 through 7
    http://support.apple.com/kb/PH5836
5. Disk space / Time Machine ?/ Local Snapshots
   http://support.apple.com/kb/ht4878
6. Re-index Macintosh HD
   System Preferences > Spotlight > Privacy
   http://support.apple.com/kb/ht2409
If this does not help, you have to buy an external HD and move your movies photos.etc to
the external HD.

I have a question about extracting pages. When I do the function, adobe saves the individual files as " file name space page number ", so the files look like this "filename 1.pdf", "filename 2.pdf", "filename 3.pdf". Without too many gory details, I a

I have a question about extracting pages. When I do the function, adobe saves the individual files as "<file name><space><page number>", so the files look like this "filename 1.pdf", "filename 2.pdf", "filename 3.pdf". Without too many gory details, I am using excel to concatenate some data to dynamically build a hyperlink to these extraced files. It casues me problems, however, for the space to be the the file name. Is there any way to change the default behavoir of this function to perhaps use a dash or underscore instead of a space?

No, you can't change the default naming scheme. You can do it yourself if you extract the pages using a script instead of using the built-in command.

Quick question about showing drive space

Hi,
Just got a quick query about showing remaining drive space on the desktop.
Before I wiped my Pismo and reinstalled Tiger (bad kernel panic), my hard drive and any other connected drives (pen drive, iPod, iDisk, etc) showed up on my Desktop with the name and drive capacity and remaining space underneath the icon.
Now I've reinstalled, the drive capacity and remaining space don't show up on the Desktop, and I can't find how to turn it on. I've been through Preferences several times and can't find an obvious switch. Have I missed something? I'm running Tiger 10.4.8 with the machine spec below.
Thanks in advance,
Rob Johnson

Sometimes, for no obvious reason, the Finder can be slow to update. And sometimes it updates instantly. Why? "Only the Shadow knows...." or maybe the Apple programmers.
Francine
Francine
Schwieder

Some questions about Muse

First of all, I would like to say that I am very impressed with how well Muse works and how easy it was to create a website that satisfies me. Before I started a daily updated website I thought I would encounter many problems I will not be able to solve. I have only had a few minor issues which I would like to share with you.
The most problems I have with a horizontal layouts (http://www.leftlane.pl/sty14/dig-t-r-3-cylindrowy-silnik-nissana-o-wadze-40-kg-i-mocy-400- km.html). Marking and copying of a text is possible only on the last (top) layer of a document. The same situation is with widgets or anything connected with rollover state - it does not work. In the above example it would be perfect to use a composition/tooltip widget on the first page. Unfortunately, you cannot even move the cursor into it.
It would be helpful to have an option of rolling a mouse to an anchor (like in here http://www.play.pl/super-smartfony/lg-nexus-5.html and here http://www.thepetedesign.com/demos/onepage_scroll_demo.html). I mean any action of a mouse wheel would make a move to another anchor/screen. It would make navigation of my site very easy.
Is it possible to create a widget with a function next anchor/previous anchor? Currently, in the menu every button must be connected to a different anchor for the menu to be functional.
A question about Adobe Muse. Is it possible to create panels in different columns? It would make it easier to go through all the sophisticated program functions.
The hits from Facebook have sometimes very long links, eg.
(http://www.leftlane.pl/sty14/mclaren-p1-nowy-krol-nurburgring.html?fb_action_ids=143235557 3667782&fb_action_types=og.likes&fb_source=aggregation&fb_aggregation_id=288381481237582). If such a link is activated, the anchors in the menu do not work on any page. I mean the backlight of an active state, which helps the user to find out where on page they currently are. The problem also occurs when in the name of a html file polish fonts exist. And sometimes the dots does not work without any reason, mostly in the main page, sometimes in the cooperation page either (http://www.leftlane.pl/wspolpraca/). In the first case (on main page), I do not know why. I have checked if they did not drop into a state button by accident, moved them among the layers, numbered them from scratch and it did not help. In the cooperation page, the first anchor does not work if it is in Y axle set at 0. If I move it right direction- everything is ok.
The text frame with background fill does not change text color in overlay state (http://www.leftlane.pl/sty14/nowe-mini-krolestwo-silnikow-3-cylindrowych.html). I mean a source button at the beginning of every text. I would like a dark text and a light layer in a rollover, but the text after export and moving cursor into it does not change color for some reason.
I was not sure whether to keep everything (whole website) in one Muse file (but I may be mistaken?). I have decided to divide it into months. Everyone is in a different Muse file. If something goes wrong, I will not have any trouble with an upload of a whole site, which is going to get bigger and bigger.
The problem is that every file has two master pages. Everything works well up to the moment when I realize how many times I have to make changes in upper menu when I need to add something there. I have already 5 files, every with 2 masters. Is there any way to solve this problem? Maybe something to do with Business Catalyst, where I could connect a menu to every subpage independently, deleting it from Muse file? Doing so I would be able to edit it everywhere from one place. It would make my work much easier, but I have no idea jendak how to do it.
The comments Disqus do not load, especially at horizontal layouts (http://www.leftlane.pl/sty14/2014-infiniti-q50-eau-rouge-concept.html). I have exchanged some mails and screenshots with Disqus help. I have sent them a screenshot where the comments are not loaded, because they almost never load. They have replied that it works at their place even with attached screenshot. I have a hard time to discuss it, because it does not work with me and with my friends either. Maybe you could fix it? I would not like to end up with awful facebook comments ;). The problem is with Firefox on PC and Mac. Chrome, Safari and Opera work ok.
YouTube movie level layouts do not work well with IE11 and Safari 7 (http://www.leftlane.pl/sty14/wypadki-drogowe--004.html). The background should roll left, but in the above mentioned browsers it jumps up. Moreover the scrolling with menu dots is not fluent on Firefox, but I guess it is due to Firefox issues? The same layout but in vertical version rolls fluently in Firefox (http://www.leftlane.pl/sty14/polskie-wypadki--005.html).
Now, viewing the website on new smartphones and tablets. I know it is not a mobile/tablet layout, but I tried to make it possible to be used on mobile hardware with HD (1280) display. I mean most of all horizontal layouts (http://www.leftlane.pl/sty14/2015-hyundai-genesis.html), where If we want to roll left, we need to roll down. Is there a way to make it possible to move the finger the direction in which the layout goes?
On Android phones (Nexus 4, Android 4.4.2, Chrome 32) the fade away background effect does not work, although I have spent a lot of time over it (http://www.leftlane.pl/lut14/koniec-produkcji-elektrycznego-renault-fluence-ze!.html). It is ok on PC, but on the phone it does not look good. A whole picture moves from a lower layer instead of an edge which spoils everything.
This layout does not look good on Android (http://www.leftlane.pl/sty14/nowe-mini-krolestwo-silnikow-3-cylindrowych.html#a07). The background does not fill the whole width of a page. There are also problems with a photo gallery, where full screen pictures should fill more of a screen.
Is it possible to make an option of scroll effects/motions for a fullscreen slideshow widget thumbnails (http://www.leftlane.pl/sty14/2014-chevrolet-ss%2c-rodzinny-sedan-z-415-konnym-v8.html#a06)? It would help me with designing layouts. Currently, it can go from a bottom of a page at x1 speed or emerge (like in this layout) by changing opacity. Something more will be needed, I suppose.
Sometimes the pictures from gallery (http://www.leftlane.pl/sty14/2014-chevrolet-ss%2c-rodzinny-sedan-z-415-konnym-v8.html#a06 download very slowly. The website is hosted at Business Catalyst. I cannot state when exactly it happens, most of the time it works ok.
I really like layouts like this (http://www.leftlane.pl/sty14/2014-chevrolet-ss%2c-rodzinny-sedan-z-415-konnym-v8.html#a03). On the top is a description and a main text, and the picture is a filled object with a hold set at the bottom edge. That is why there is a nice effect of a filling a whole screen- nevertheless the resolution that is set. It works perfect on PC, but on Android the picture goes beyond the screen. You can do something about it?
In horizontal layouts (http://www.leftlane.pl/sty14/dig-t-r-3-cylindrowy-silnik-nissana-o-wadze-40-kg-i-mocy-400- km.html) holding of a filling object does not work. Everything is always held to upper edge of a screen regardless the settings. Possibility of holding the picture to the bottom edge or center would make my work much easier.
According to UE regulations we have to inform about the cookies. I do not know how to do it in Muse. I mean, when the message shows up one time and is accepted, there would be no need to show it again and again during another visit on the website. Is there any way to do it? Is there any widget for it maybe?
The YouTube widget sometimes changes size just like that. It is so when the miniature of the movie does not load, and the widget is set to stroke (in our case 4 pixels, rounded to 1 pixel). As I remember ( in case of a load error) it extends for 8 pixels wide.
Last but not least - we use the cheapest hosting plan in Business Catalyst. The monthly bandwidth is enough, although we have a lot of pictures and we worried about it at first. Yet we are running out of the disk storage very quickly. We have used more than a half of a 1 GB after a month. We do not want to change BC for a different one, because we like the way it is connected with Muse. But we do not want to buy the most expensive package - but only this one has more disk space. We do not need any other of these functions and it would devastate our budget. Do we have any other option?
I’m using Adobe Muse 7.2 on OS X 10.9.1.
and I'm sending Muse file to <[email protected]>

Unfortunatley, there is no way to get a code view in Muse. I know quite a few people requested it in the previous forum, but not really sure where that ended up. Also, you may not want to bring the html into DW unless you only have 1 or 2 small changes 2 make. Two reasons. First, it isnt backwards compatible, so if you are planning on updating that site in Muse, you will need to make those changes in DW everytime you update. Second, by all accounts the HTML that Muse puts out is not pretty or easy to work with. Unlike you, I am code averse, but there was a lenghty discussion on the previous forum on this topic. I know they were striving to make it better with every release, just not sure where it is at this point.
Dont think I am reading that second question right, but there was a ton of info on that old site. You may want to take a look there, people posted a ton of great unique solutions, so it worth a look.
Here is the link to the old forums- http://support.muse.adobe.com/muse

Questions about editing with io HD or Kona 3 cards

My production company is switching from Avid to Final Cut Pro. I have a few editing system questions (not ingesting and outputting, just questions about systems for the actual editors - we will have mac pros with either kona 3 or io HD for ingest and outputs)
1) Our editors work from home so they most likely will be using MacBook Pros - Intel Core 2 Duo 2.6GHz 4GB computers with eSata drives to work on uncompressed HD, will they be able to work more quickly in FCP if they are using the new Mac Pro 8-Core (2 Quad-Core 2.8GHz Intel Xeon) or will the mac book pro's be able to hold their own with editing hour long documentaries, uncompressed HD
2) Will having an AJA Kona 3 (if we get the editors mac pros) or io HD (for the mac book pros) connected be a significant help to the editor's and their process, will it speed up their work, will it allow them to edit sequences without having to render clips of different formats? Or will they be just as well off without editing with the io HD?
I'm just trying to get a better understanding of the necessity of the AJA hardware in terms of working with the editors to help them do what they have to do with projects that have been shot on many formats- DVCPro tapes, Aiptek cameras that create QTs and P2 footage.
Thanks

1. with the IoHD, laptops become OK working with ProRes and simply eSata setups. Without the Io, they can't view externally on a video monitor (a must in my book). It will not speed up rendering a ton, nor will it save renders of mixed formats. The idea is to get all source footage to ProRes with the Io, and then the Io also lifts the CPU from having to convert ProRes to something you can monitor externally on a video monitor, and record back to any tape format you want... all in real time.
2. Kona 3's on Towers would run circles around render times on a Laptop... no matter what the codec, but the Kona does not really speed renders up. That's a function of the CPU and just how fast is it. (lots of CPU's at faster speeds will speed up render times).
I'd recommend you capture to ProRes with Io's or the Kona 3 and don't work in uncompressed HD. You gain nothing doing it quality wise at all. And you only use up a ton of disk space (6 times the size in fact) capturing and working in uncompressed HD, which from your post, you're not shooting anyway. The lovely thing about ProRes is that it's visually lossless, efficient, and speeds up the editing process. Mixing formats can be done, but it's better to go to ProRes for all source footage, and edit that way.
With either the Kona or the Io, you then can output to uncompressed HD tape... that's what they do for you no matter what codec you've edited in. ProRes is designed to be the codec of choice for all HD projects when you're shooting different formats especially... Get them all singing the same tune in your editing stations, and you'll be a much happier camper. Only reason to buy laptops is portability... otherwise you're much better off with towers and the Kona 3 speed wise.
Jerry
Message was edited by: Jerry Hofmann

Question about internet security...please help!

Hi everyone,
I have a question about the macbook's internet security.
A few days ago I became aware that my sibling was using a laptop for internet use at my house which he got from a person that I do not trust. He is very computer-savy and we're worried that he may have installed some form of spy ware on that laptop and in turn, may have tried (or succeeded) in accessing my Macbook through some form of spyware. My house is hooked up with a D-Link wireless router, and at the time, it had no internet/access-password.
So my question is, could this person have accessed my computer and personal information remotely by and through the laptop that my sibling got from him. I was under the impression that Mac's have very strong firewalls, but I have also heard that as long as he knew what he was doing, he could have accessed my computer. I don't have a wireless "network" set up at my house, I just simply use the router for internet. But my sibling told me that this guy was his "network administrator" which leads me to believe that he must have had remote access to the laptop.
Can anyone with knowledge on this problem please weigh in and let me know what I need to do to confirm that no one has accessed anything from my macbook.
Thanks!

One option if you want to be extra safe is turning on FileVault (System Preferences -> Security), which will encrypt everything on your computer so that if somehow someone does gain access to your computer they will have a next to zero chance of being able to read anything they get from your computer. You have to have a lot of extra hard drive space on your computer to turn it on though.
Also, a "network" is just a connection between computers, regardless of the internet is involved or not. So when you connect your computer to the router which gives you the internet, you are putting your computer on a network. Now I believe that in order for this person whom you don't trust to gain remote access to your computer, they would have to have more information such as an IP address for your computer, through the router in order to get to it.
One thing I think is very important to consider that isn't on the technical side of things is something called "Social Engineering" which is a form of cracking, or hacking. You can do your own research, but in a nutshell Social Engineering is getting people that have access to something I'm trying to hack to give me information. For instance, this person you don't trust could be giving your brother the computer in the hopes that he will download something through your router to that laptop which could give him IP addresses and other information. And then when he gets that laptop back he could scan it for useful information and your brother wouldn't know he did anything wrong at all. The best way to avoid this is purely education and communication. Even if your brother doesn't share the same suspicions about this person, surely he will understand the need to be careful and smart when it comes to sharing personal information in the digital world.

Question about free down loading Mavericks. On checking Mavericks before downloading that there are no Bangla language in the list. I occasionally use Bangla in my present Mountain Lion. My concerns if I down load Mavericks then what will happen to Bangla

Question about free downloading Mavericks. On checking Mavericks before downloading that there are no Bangla language in the list. I occasionally use Bangla in my present Mountain Lion. My concerns is, if I download Mavericks then what will happen to Bangla language in mountain lion? Samar Laha

No reason to be embarassed. You are not alone.
You will need an external drive. If you have a Time Machine drive without enough disk space you can create the clone there however it's advised that you keep your Time Machine and clone on separate drives. If the drive dies you loose both types of backup.
Download and install the clone software. Everyone has their favorite. These are the two most common applications used. I prefer SuperDuper because of it's simplicity in setting up. It's also free for the first clone where with CCC you have to give a Credit Card then cancel if you do not want to keep.
SuperDuper! http://www.shirt-pocket.com/
CCC http://www.bombich.com/download.html
Select your drive in the To popup. Click on Copy Now. That's it.
Yes, it really is that simple....

Question about Kurts comments discussing the seperation of AIA & CDP - Test Lab Guide: Deploying an AD CS Two-Tier PKI Hierarchy - Kurt L Hudson MSFT

Question about the sentence in bold. What is the meaning behind this comment?
How would you separate the role of the AIA and CDP from a CA subordinate server? I can see where I add a CES and CEP server which has those as well, but I don't completely understand his comment. Because in this second step, (http://technet.microsoft.com/en-us/library/tlg-key-based-renewal.aspx)
he shows how to implement CES and CEP.
This is from the guide located at: http://technet.microsoft.com/library/hh831348.aspx
Step 3: Configure APP1 to distribute certificates and CRLs
In the extensions of the root CA, it was stated that the CRL from the root CA would be available via http://www.contoso.com/pki. Currently, there is not a PKI virtual directory on APP1, so one must be created.
In a production environment, you would typically separate the issuing CA role from the role of hosting the AIA and CDP.
However, this lab combines both in order to reduce the number of resources needed to complete the lab.
Thanks,
James

My concern is, they have a 2-3k base of xp systems, over this year they are migrating them to Windows 7. During this time they will also be upgrading hardware for the existing windows 7 machines. The turnover of certificates are going to be high, which
from what I've read here, it worries me.
http://blogs.technet.com/b/askds/archive/2009/06/24/implementing-an-ocsp-responder-part-i-introducing-ocsp.aspx
The application then can go to those locations to download the CRL. There are, however, some potential issues with this scenario. CRLs over time can get rather large
depending on the number of certificates issued and revoked. If CRLs grow to a large size, and many clients have to download CRLs, this can have a negative impact on network performance. More importantly, by
default Windows clients will timeout after 15 seconds while trying to download a CRL. Additionally,
CRLs have information about every currently valid certificate that has been revoked, which is an excessive amount of data given the fact that an application may only need the revocation status for a few certificates. So,
aside from downloading the CRL, the application or the OS has to parse the CRL and find a match for the serial number of the certificate that has been revoked.
With the above limitations, which mostly revolve around scalability, it is clear that there are some drawbacks to using CRLs. Hence, the introduction of Online Certificate
Status Protocol (OCSP). OCSP reduces the overhead associated with CRLs. There are server/client components to OCSP: The OCSP responder, which is the server component, and the OCSP Client. The OCSP Responder accepts status
requests from OCSP Clients. When the OCSP Responder receives the request from the client it then needs to determine the status of the certificate using the serial number presented by the client. First the OCSP Responder determines if it has any cached responses
for the same request. If it does, it can then send that response to the client. If there is no cached response, the OCSP Responder then checks to see if it has the CRL issued by the CA cached locally on the OCSP. If it does, it can check the revocation status
locally, and send a response to the client stating whether the certificate is valid or revoked. The response is signed by the OCSP Signing Certificate that is selected during installation. If the OCSP does not have the CRL cached locally, the OCSP Responder
can retrieve the CRL from the CDP locations listed in the certificate. The OCSP Responder then can parse the CRL to determine the revocation status, and send the appropriate response to the client.

HT201670 Question about cropping in negative space on Aperture

Similar Messages

Maybe you are looking for