Migration to MS CA from a Third-party CA

Hi, we have an OpenCA in use with several certificates generated and revoked and also a periodically generated CRL.
We want to migrate to MS CA (2008 R2 preferably, Standalone or Enterprise) without revoking and re-creating all the certs.
Is there any way to move from OpenCA to MS CA?
Thanks and Best regards
Sergio

Sergio,
Answers below:
You said that it is not possible to import the certs generated in OpenCA into MS CA. Am I right?
It would not be worth it. You can import them one by one into the database, but you may have to enable foreign import and the gains are not
worth it.
So, the best way is to maintain OpenCA and MS CA, both with the same root keys, and begin using MS CA for the new certs and maintain OpenCA for the previously generated certs, until
these certs expires (or are revoked). Am I right?
Yes. Except that I would use a separate key pair on the MS CA. I would not use the same key pair in this migration
method.
In this case, I don't realize how to manage the CRLs: from both platforms? From MS CA?
From both platforms. With the MS CA using a separate key pair (protected by the HSM), I would maintain its own
CRL and AIA extensions. Same with the Open CA.
Brian

Similar Messages

  • Error on load: System.IO.IOException: The process cannot access the file : error in event viewer when users want to view documents from this third party deployed scan solution

    Error on load: System.IO.IOException: The process cannot access the file
    '\\server1\SCANSHARED\.pdf' because it is being used by another process.
       at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
       at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
       at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)
       at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
       at System.IO.File.WriteAllBytes(String path, Byte[] bytes)
       at abc.Scan.Layouts.ICC.Scan.View.Page_Load(Object sender, EventArgs e)
    I faced this  error in event viewer  when users want to view documents from this third party deployed scan solution
    here I have two WFS servers  and they configured with load balancing in F5 .
    when I enable both servers in F5 I receive this error messages in 2nd server,
    when users want to view documents
    adil

    Do you have antiVirus installed on the sharepoint servers?
    These folders may have to be excluded from antivirus scanning when you use file-level antivirus software in SharePoint. If these folders are not excluded, you may see unexpected behavior. For example, you may receive "access denied" error messages when files
    are uploaded.
    Please follow this KB and exclude the folders from Scanning.
    http://support.microsoft.com/kb/952167
    Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

  • Receiving a calendar event message from a third party on a BB Z10

    I have a BB Z10 on the UK Vodafone network. My Z10 is set to GMT time and correctly shows that I am in the "Dublin, London" time zone. This is the GMT time zone description that all BB devices that I have ever owned have shown.
    This afternoon (UK time) i received a calendar event notification from a client who I have since established was at his desk in London when he sent the message advising me of a conference call to take place next week.
    The advice on the Z10 has five clear sections: "Status", "Date", a bell symbol to indicate when the reminder will sound, and a fifth symbol indicating the number on which to call in, and the PIN code.
    However, and this is my serious problem, there is a third section on the advice which has a globe symbol and appears to exist to indicate where the person setting up the event was located when he/she sent the message. In the specific case of which I write, the message states "This event is displayed in local time, but was created in Reykjavik (GMT) [sic}". The actual message shows the time for the event as one hour later than the actual time that the event is scheduled to take place - in other words GMT + 2 hours - namely the time in continental Europe and Reykjavik.
    I have serious issues with this:
    1) Is it the real intention to indicate where the sender of the message was located when the message was sent?
    2) if yes, this is a serious breach of privacy
    3) if yes, the location is wrong, as the person who sent me the message has confirmed that he was at his desk in London
    4) if no what is the purpose in indicating where "the message was created" (BB's words - not mine)
    5) the indicated time of the event is wrong - it has assumed a different time zone than that in which I and the sender are located.
    Has anyone else encountered this problem and what has BB got to say about it???
    Thanks
    PJCMoray
    PJCMoray

    I received the e-mail notification on Microsift Outlook from a third party (i.e. not someone within my own organisation).
    The same invite on both my lap-top  computer and my BB 9900 Bold did not have any mention about the sender being in Iceland (or anywhere else!) and showed the correct time and time-zone for the agreed meeting - namely, 8,30am on Friday the 19th April.
    I confirm that my Z10 is set to the "Dublin, London (+0)" time zone and is currently showing the correct British Summer Time of 16.31. The device switched automatically to British Summer Time on Sunday 31st March.
    I would welcome your comments.
    In every other respect (apart from the infamous Outlook USB synching issue about which I am sure you have heard more than enough!!), the Z10 is an outstanding device and deserves to be the device which at long last wipes the smile off the faces of those equine rumps in Cupertino, California!!
    I am expecting the roll-out of the Q10 in the UK in a couple of weeks  - please??!!
    Thanks again for your help and assistance
    PJCMoray
    PJCMoray

  • Can I buy a phone from a third party and put my sim card in it?

    My son has an Intensity 3 and I want to upgrade him to a smartphone but he's not upgrade eligible for another year. Can I buy a phone like a Galaxy S4 from a third party and put the sim card from the Intensity in it?

    Yes. You can call Verizon and have them mail you a compatible SIM card or go to one of the stores to pick it up.
    You will want to make sure the device you get has a clean ESN before you purchase it and has not been reported lost or stolen.  If you have the device id CS can help you tell if it's clean.  Or you can use the link below to check.
    http://www.verizonwireless.com/b2c/nso/enterDeviceId.do

  • How to call the RFC's from the third party applications or Non SAP applicat

    Hi,
    For calling RFC's from the wedynpro , SAP has provided the modeling concept.
    In the same way, if i want to access or call the RFC 's from the third applications or Non SAP applications what is the procedure and what is the methodoligy.
    As per my knowledge, we need to expose those RFC's as webservices . Then we must be able to acces in hetrogeous environment from any third party applications..
    Please revert back soon, It is very urgent.
    Regards
    Vijay

    Ayyappa Raj,
    Thanks for the reply.
    Please let me the detailed information for implementing.
    AS you said . I need expose the RFC's as webservice. This point is clear to me.
    2) Use tthe JCo to connect and create client proxy.
    Can u please elabrate the above point?
    If u have any steps created in the document or url to refer. Please forward it to me.
    Please forwar the document to this id "vijay00" in yahoo.
    AS the sdn is not allowing to give  the maill id i have given only the id details in yahoo.
    I am new to this procedure.
    Regards
    Vijay

  • Calling IPC from a third party web application

    ISA, IPC experts,
    We have CRM 4.0 with IPC 4.0. We are developing an in house web application  in jsp/java for dealer orders. Our office staff uses CRM Online for Order Entry.
    We want to use the existing pricing procedures in the IPC to derive the pricing for the web project so our user can see the price for a given product prior to placing the order in CRM.
    How can we call IPC from a third party order software in java? prefereably without installing a standalone IPC (heard that IPC 5.0 may not support standalone mode)?
    Can you help us with ways to call the IPC from our in house web application, or point us to some documentation about the ipc client layer?
    Your help in this regard is highly appreciated.
    Yanhui Yu

    Hi Yanjui,
    if you have a CRM installation, an IPC is part of that installation. Connect your web application to that IPC. The IPC comes with its own web applications, which base on a package com.sap.spc.remote.client.object. These are APIs that you might consider using in your web application. The package should be documented with the API docs that come with your web apps, but I'm not sure about how this is delivered (sorry).
    Concerning upgradability to CRM 5.0: The IPC there does not come as its own server anymore, but offers ABAP RFC functions that are actually implemented in Java using new Netweaver technology. The 5.0 RFCs are similar, but not identical to the old IPC commands / RFCs, so an upgrade is no problem, but some changes are required. The same applies for com.sap.spc.remote.client.object, which has changed a bit as a result of the changes in the IPC APIs below.
    Alternatively to using com.sap.spc.remote.client.object, you might also try to directly call the RFC functions of the IPC server. Finding out what the various parameters that you have to pass do is not too tricky:
    - in your IPC installation, a file <ipc>/lib/properties/servercommands.xml contains all RFCs that the IPC knows.
    - for the RFC you want to use check the respective javaname in that file.
    - for that javaname check class com.sap.spc.remote.server.command.<javaname> in the javadoc API Documentation that is part of your IPC installation. This will contain rather technical details on how to call the RFCs.
    Please be aware that it's not an easy job providing all the data that IPC needs to do pricing.
    I would recommend using the E-Commerce application which has done this job for you already.
    Best regards,
    Karlheinz

  • [svn:fx-trunk] 11488: Resubmitting binary distribution of xercesPatch. jar from the third party module in the SDK and compiled it with Sun JDK 1.4 .2_12.

    Revision: 11488
    Author:   [email protected]
    Date:     2009-11-05 17:10:10 -0800 (Thu, 05 Nov 2009)
    Log Message:
    Resubmitting binary distribution of xercesPatch.jar from the third party module in the SDK and compiled it with Sun JDK 1.4.2_12.
    QE notes: N/A
    Doc notes: N/A
    Bugs:
    SDK-16818 - Must open-source the code for xercesPatch.jar.
    Reviewer: Discussed with Gordon
    Tests run: Checkintests
    Is noteworthy for integration: No
    Ticket Links:
        http://bugs.adobe.com/jira/browse/SDK-16818
    Modified Paths:
        flex/sdk/trunk/lib/xercesPatch.jar
        flex/sdk/trunk/modules/thirdparty/xerces-patch/build.xml

    Did you try this:
    http://forum.java.sun.com/thread.jsp?thread=434718&forum=60&message=1964421

  • How do I sign an IPA coming from a third party developer with our Distribution Profile?

    We have an app developed from a third party developer. We then received his IPA file.
    Upon uploading the IPA using Application Loader, we are getting this error,
    We tried sending our Mobile Developer and Distribution Provisioning Profiles to him, but he cannot build the IPA and told us he needs our Private Key (which we are not considering since we fear that he may be able to develop apps using our account).
    We tried manually signing the IPA using terminal but we are getting this error:
    What can we do?
    Thanks in advance!

    One of the 3rd-party Crystal Reports viewers listed at http://www.kenhamady.com/bookmarks.html provides a full command line API, so you can call a report from your app and pass parameter values, login info, etc.

  • Read the pdf file from the Third party server.

    hi all,
    we got the requirement that we have to display the salary statement and form16 in the portal.
    we are not using the sap for the pay roll.
    pay roll will run by the third party....they will keep all salary slips in the one folder under the server.
    so from the third party server we have to get the salary statement in to our application......third party will storing the file with salcode.pdf.
    can you help me to resolve this?
    Thanks in advance
    swapna

    Hi yugedhar,
    thank you for the reply.
    the pdf files will be available in one common folder , with in the server only.
    so i have to implement the code to download the file from the one particular location based on the name of the file
    (means if  file name =Login id that has to open)
    so can you help me implement this logic .
    Thank you
    swapna

  • Open iProcurement Smart form from a Third Party System

    Hi,
    I have a requirement to open the iProcurement smart form from a third party system. We have the Single Sign on functionality so the user can log into the oracle apps without entering the credentials.
    Please share if someone has prior knowledge on that.
    Thanks & Regards,
    Munish Mittal

    If the ICX_SESSION is already available then the form(I am assuming you are refering to a web based form here) should open directly if the function should be accessible to the user logged in. When you say your custom application is included in Oracle apps are you launching these pages from the Ebiz home page through menus and functions ?

  • Access data from a third party warehousing tools in BEx WAD

    Hi,
           I would like to know whether it's possible to access data from a third party warehousing tools ( For eg: Cognos) in BEx Web Application designer. Any help would be appreciated.
    Thanks

    Hi,
    BEx Web Application designer is only integrated to BIW server. So We can not access data of other tools unless the data is stored in the BIW server as the data in any data target. 
    With rgds,
    Anil Kumar Sharma .P

  • How can I call reports from a third party tool?

    Hi!
    I'm a Delphi 6 developer and our company has a customer that want to call reports created in Crystal Reports directly from our software.
    What is the quickest way to open a report from a third party tool (passing parameters) ?
    There is a way to do that without embedding Crystal VCL components in Delphi?   I'm searching for a command line tool or a way to open it with URLs....
    Thanks in advance!
    Edited by: AlmirB on May 23, 2011 6:25 PM

    One of the 3rd-party Crystal Reports viewers listed at http://www.kenhamady.com/bookmarks.html provides a full command line API, so you can call a report from your app and pass parameter values, login info, etc.

  • Hey good day. i recently made a back up on my phone. then i took some pictures and videos. i accidentally restored the phone. some pictures and videos including pictures from my third party application were all gone. can i still have those back?

    hey good day. i recently made a back up on my phone. then i took some pictures and videos. i accidentally restored the phone. some pictures and videos including pictures from my third party application were all gone. can i still have those back?

    No. If you restored the device to an older backup, then the device was brought back to that date and time, which was before those photos were taken. When you restored the device, it deleted everything off the phone and replaced it with the earlier information.

  • Pop up is in safari from a third party website and won't let me do anything in safari unless I click on it. I don't want to click on it because it is probably a virus.  I hae tried restarting safari and also the computer, but it's still there.

    Pop up is in safari from a third party website and won't let me do anything in safari unless I click on it. I don't want to click on it because it is probably a virus.  I hae tried restarting safari and also the computer, but it's still there.

    Thomas' answer is the preferred technique. Sometimes, these pop-ups will block you from quitting Safari. In that case, press option+command+esc, select Safari, and Force Quit. Then, use the shift key with Safari when relaunching it, per Thomas' suggestion.

  • Buying MSDN renewal from a third party pros or cons?

    I was looking at renewing my MSDN Premium subscription from a third party vendor due to pricing. What forum would I ask to see if other people have done this?

    You could ask them over here.
    http://social.msdn.microsoft.com/Forums/en-US/home?forum=msdnfeedback
    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Maybe you are looking for