LDAPS windows 2008 R2 – external domain – CA

• No Comments
• Jul, 21, 2011
• Angelo Schalley
• Active Directory, Certificates, IIS, Networking, security, Windows-Microsoft

on the local domain controller create a request :

;—————– request.inf —————–
[Version]
Signature=”$Windows NT$

[NewRequest]
Subject = “CN=<dc01.domain.local>” ; replace with the FQDN of the DC
KeySpec = 1
KeyLength = 1024
; Can be 1024, 2048, 4096, 8192, or 16384.
; Larger key sizes are more secure, but have
; a greater impact on performance.
Exportable = TRUE
MachineKeySet = TRUE
SMIME = False
PrivateKeyArchive = FALSE
UserProtected = FALSE
UseExistingKeySet = FALSE
ProviderName = “Microsoft RSA SChannel Cryptographic Provider”
ProviderType = 12
RequestType = PKCS10
KeyUsage = 0xa0
[EnhancedKeyUsageExtension]
OID=1.3.6.1.5.5.7.3.1 ; this is for Server Authentication

Read more on LDAPS windows 2008 R2 – external domain – CA…