MCITP Test Access Control Entities create custom certi?cates

Note that if you were able to complete this exercise, you could click OK and then choose from any additional options on the Extensions tab, such as Include in the CDP Extension of Issued Certi?cates.

Not all applications and not all certi?cates are mcse 2008 created equal. In fact, they?re created unequally by design. Many different types of certi?cates exist to meet various purposes in the enterprise, and you need to learn how to use them. This is why Windows Server 2008 comes with several types of ready-made certi?cates. However, you can also create custom certi?cates for various devices and users within your organization. Ultimately, the use of certi?cates achieves one very important goal: it relieves the burden of issuing certi?cates without complicated certi?cate requests.

Another interesting fact is that although not all certi?cates are created equal, various versions of certi?cate templates are also created even less equal. Windows Server 2008 takes advantage of Windows Certi?cate Template Version 3. This new type of certi?cate is supported by Active Directory Certi?cate Services and includes a new feature, called Cryp- tography Next Generation, which allows the use of Suite B algorithms in certi?cates.

You are probably inferring that there must have been a version 1 and version 2 of the certi?cate template. You’re right: version 1 templates were not customizable and had very few of the handy features now available to administrators. Windows Server 2003 Enterprise edition supported version 2 of these certi?cate templates, which revolutionized the original version 1 certi?cates by enabling features such as key archival, recovery, and microsoft exam autoenrollment.

For the certification exam, remember that Version 2 certificate templates are supported in Windows Server 2003 and Windows Server 2008 Enter- prise edition certificate authorities.

Using Windows Server 2008, administrators now have the option of utilizing a new suite of encryption algorithms that allow the creation of custom security for digital signatures, key exchange, hashing, and other features for all encryption-requiring applications in the enter- prise. This new set of features is called Windows Server 2008 Cryptography Next Genera- tion (CNG).

Processing your request, Please wait....

Leave a Reply