[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 251
  • Last Modified:

import Windows 2008 certificates from new sister company in different forest

Hello.

I need some guidance on how to import Windows 2008 certificates. My company is small and has a simple Win2008 R2 domain with a single root CA on Win2008 R2. We were just purchased by a large company with root and intermediate CA's, I think on Win2003 R2.

They have their own forest and I have my own forest, which are totally separate. First, we set up an MPLS dedicated T1 circuit between our two companies, and then we established a two-way domain trust. Now, we can see and access each other's servers across the MPLS.

Now, we want to trust each other's Windows certificates, but I'm not sure exactly how to do it. They have provided me with AcmeCorp.cer, AcmeCorpCA.p7b, AcmeCorp-Enterprise-CA.cer and AcmeCorp-IntermediateCA1.cer files.

I went into the Certificates MMC and see an Import option under Trusted Root Certification Autorities, Enterprise Trust, etc. But I'm not sure which certificate goes where, or if I'm even in the right place.

Thanks.
0
JohnValue
Asked:
JohnValue
1 Solution
 
James HaywoodCommented:
Import them all into Trusted Root Certification Authorities.

To deploy these certificates out to all your machines use the GPO setting:

\\computer configuration\Windows Settings\Security Settings\Public Key Polices\Trusted Publishers

Import all 4 Certs following the wizard.
0
 
JohnValueAuthor Commented:
Your solution worked. Thanks.

Specifically, I clicked on the "Certificates" folder under "Trusted Root Certification Authorities", right-click, "All Tasks", "Import". In the Wizard, I selected "Automatically select the certificate store based on the type of certificate" for all four certificates.
Only the AcmeCorpCA and IntermediateCA1 appeared, and only in the "Certificates" folder under "Intermediate Certification Authories". Also, to see them I had the click on each "Certificates" folder and click the refresh button.

Then I went into the Default Domain Policy and imported the certificates as you specified. The AcmeCorpCA.p7b didn't show up in the Trusted Publishers folder, though it said it was successfully imported.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now