1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

Automated CA build

Discussion in 'General Malware And Security' started by Wayne Harris, Mar 14, 2008.

  1. Wayne Harris

    Wayne Harris Guest

    Creating a hands off PKI install.
    And Enterprise Root CA.

    I need to set the DN to the following.

    O=Parent Company
    OU=Child Company
    C=US

    Somehow, i seem to only be able to set the CA's name. not the
    Distinguished name. If I build the CA by hand, of course i can type
    it in. But the automatic version of this seems to be tricky.

    Here is my unattend.inf file:
    [components]
    certsrv=on
    CertSrv_Server=on
    CertSrv_Client=on
    [Certsrv_Server]
    CAType=EnterpriseRoot
    CSPProvider="Microsoft Strong Cryptographic Provider"
    HashAlgorithm=SHA1
    KeyLength=2048
    Locality="US"
    Name="XYZ Corp Experimental CA R3"
    Organization="Parent Corporation"
    OrganizationUnit="Child Corp"
    SharedFolder=c:\cainstall
    UseSharedFolder=Yes
    ValidityPeriod=5
    ValidityPeriodUnits=Years

    Here is my reference:



    I am using the following command prompt to launch it.

    sysocmgr /i:sysoc.inf /u:c:\cainstall\unattend.inf

    Anyone ever set the CA's DN from an unattended install? if so, how?
    -Wayne
    wayne_a_harris@hotmail.com
     
  2. Is this a Windows Server 2003 CA? If yes then we donot support setting the
    DN for unattended setup for Windows Server 2003.
    You can do it using the setup UI.
    Here is the list of supported unattend.inf options for the CA:
     

Share This Page