Which Machine

• For security reasons it is a good idea to designate a specific machine as a dedicated certificate server.

• Once Microsoft Certificate Services is installed on a computer, one cannot:
  • Rename a computer running Microsoft Certificate Services.
  • Change the domain membership of a computer running Microsoft Certificate Services.

• The Simple Certificate Enrollment Protocol (SCEP) add-on for Microsoft Certificate Services cannot be installed on a certificate server that contains non-alphanumeric characters in its name.
  • This add-on provides support for the SCEP protocol.
  • It allows routers and other intermediate network devices to obtain digital certificates.

What about machine uptime?

---

---

© 2006 John Michael Pierobon

Notes