??????? ??? ????? ????? ?????? ?????? ??????? ?????? ?? ?????? ???????

?????? ????????? ?????? ?????????
???? ???????: 281245 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

??????

????? ????? ????? ????? ???? ????? ?????? ?? Microsoft Windows 2000 ? ???? ???? ??? ??????? ?? Microsoft (CA) ?? ???? ????? ????????? ???????? ?? ??? ???????. ??? ??? ????? ???? ??????? ??? ?? ???? ?????? ?? ??? ???????.

??????? ????

???????

????? "?????? ??????? ??????" ??? "Active Directory" ??? ????? ????? ??????? ?????? "Active Directory" ? ???? ?????? ??????? "????? Active Directory" ????? ???? ????. ??? ?? ??? Active Directory ???? ???? ??????? ?????????? ???????? ??? ?????? ?? ???? ???? ???. ??? ?? ??? ????? ?? ????? ????? ??????? ?????? ?????? ???? ?????? ?? ???????? ???? ?? ??????? ???? ????.

??? ??? ?? ?? ????? PKI ???? ??????? ??? ?? ??? "?????? ?????? ?????" ???? ????? ?????? ?????? ???????. ????? ???? ?????? ???? ????? ????? ??????? ?????? ????? ???? ?????.

?????? ????? ?????? ???? ???? ??????

  • ????????: ??? ?? Active Directory ???? ?????? ?????? ??????? ???? ?????? ?? ???? NTAuth ??????? ?????????? ??? ?????? ?????.
  • ????????: ??? ????? ????? ???? ?????? ???????? ????? ???? ???? ??????? ??????? ??????? ?????? ??????????.
  • ???????: Active Directory ???? ????? ?????? CA ????? ???? ?????? ??? ???? ???? ??? ????? ?? ?? ???? ????? ?????? ???????? "??? ????????".

????? ??????? ?????? ???????? ???? ?????

  • ????????: ???? ??????? ??????? ?????? ??????? ?? ??? "??????? ?????" ??? ?? ????? ? ??? ?? ??? ??????? ?? ??????. ??? ?????? ??????? ?????? ??? ?? ????? ??.
  • ????????: ??????? ?????? ???????? ????? ??? ????? ??? ??????? ??????.

??????? ???????

  1. ????? ?? ????? ????? ??? ???? ????. ????? ?????? ??? ??? ??? ????? ??????? ??? ????. ??? ?? ???? ??????? ?????? X.509 Encoded Base64.
  2. ????? ?????? ?????? ????? ???? ?????? ??? ?????? ??????? ??? ?? ???? "??? ?????? ???? Active Directory". ????? "??? ????????" ?? ???? Windows 2000 ?????? ?????? ???? ?????? ??? ?????? ????? ??????? ??? ?? ???? ????? ????????? ???????:
    1. ???? ??? ???? ???? ??? ???????? ???? ??? ????? ?????? ? ?? ???? ??? Active Directory Users and Computers.
    2. ?? ????? ??????? ??? ???? ?????? ???? ??? ????? ????? ???? ???? ??????.
    3. ???? ??? ?????? ?????? ??? ?????? ?? ???? ??? ?????.
    4. ???? ??? ????? ??????? ??? ????????.
    5. ???? ??? ???? ??? ?????? ??? ?????? ????????? ?? ???? ??? ?????. ??? ??? ???? ????.
    6. ?? ????? ??????? ?? ?????? ??????? ???????:
      • ????? ?????????
      • ??????? Windows
      • ??????? ??????
      • ??? ???????? ??????
    7. ???? ??? ?????? ?????? ??? ??????? ????? ????????.
    8. ??? ???? ?????? ?? ???? ??? ???????.
    9. ???? ????????? ?? ??????? ??????? ???????.
    10. ???? ??? ?????.
    11. ?? ?????? ?????? "??? ????????".
  3. ????? ??? ???????? ???? ?????? ?????? (CA) ??? ???? NTAuth ?? "Active Directory".

    ??? ?? ??? ????? ????? ??????? ?????? ?????? ?????? ?? ???? ???? ?? ???? NTAuth. ??? ????? CAs ??????? Microsoft ???? ??????? ??? ???? NTAuth.
    • ?? ???? ??? ??? CA ???? ???? ????? ??????? ?????? ?????? ?????? ?? ?????? ?? ???? ???? ???????? ???? ???? ?? ???? NTAuth ?? ???? ????? ????? ???? ??????? ??????. ????? ??????? ??????? "???? ?????? ?? ?????? ????????".
    • ??? ??? ???? NTAuth ?? ????? ??????? ????????. ??? ???? ??????? ???? ????? ??? ???:
      ????? ????? LDAP://server1.name.com/CN=NTAuthCertificates,CN=Public ? CN = ????? CN = ????? DC = ??? DC = com
    • ?????????? ??? ????? ???? ??? ??? ????? ???? ???? ??????? Microsoft. ??? ???? ????? ?????? ?????? ???????? ADSIedit.msc ?? ????? Windows 2000 ??? ?? ?????? ??????? LDIFDE.????? ?? ?????????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
      295663????? ??????? ?????? ?????? ?????? (CA) ???? ???? ?????? ?? ???? NTAuth ???????
    • ??? ??? ????? ?? cACertificate ??? ????? ???? ????? ??? ?????? ?? ????? ???????? ????? ASN.

      ??? ??? CA ???? ?????? ?? ???? NTAuth ??? ???????? ??? ?????? "??? ????????" ????? ????? (???? ????? ???????) ?? ?????? ?????? ??? ???? ????? ????????? ?? ??????:
      HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\NTAuth\Certificates
      ??? ?? ????? ?? ????? ????? ??? ????? ????? (????????? "??? ????????" ?????? ??????).
  4. ??? ????? ???? ???? ??????? ??????? ??? controller(s) ??????. ??? ?? ???? ??? ?? ???? ???? ???? ???????? ??????? ??????? ?????? ?????????? ????? ???? ???? ???????.

    ??? ??? ?????? CA ??????? Microsoft ?? ?????? ?????? "Active Directory" ???? ????? ???? ?????? ???????? ????? ????? ???? ???? ???????. ????? ?? ????????? ??? ??????? ???????? ???? ???? ?????? ?? ???? ???? ???? ?????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
    291010??????? ???????? ???? ???? ?????? ?? ???? ???? ???? ??????
    ??????: ??? ??????? ??????? ???? ???? ?????? ???? ???? ??????? ?????? (SSL) ?????? ???????? ??? ?????? ?????? (SMTP) ???????, ????? ??????? ????? ???? (RPC) ? ????? ????? ???? ??????? ??????. ?? ???? ??????? ???? ???? Microsoft-??? ????? ???? ?????? ??? ???? ???? ???? ???? ??? ????? ?? ????? ??? ?????. ?? ???? ??? ????? ????? ???? ??? ???? ?? ????? ?? ??? ??????? absent ??? ?? ???????? ???? ?? ?????????.
  5. ??? ????? ????? ?????? ?? ???? ???? ???? ??????.

    ????? ????? ?? ???? ???? ???? ?????? ???? ???? ??????? ??????? ????. ?????? ??????? ???????? ??? ???? CA.

    ??? ????? ??????? ?????? ??????? ????? ????:
    • ??? ?? ???? ?????? ???? ????? CRL "(CDP) (??? ???? CRL ?? ????? ????? ????????) ???? ??? ?????? ? ????????. ??? ???? ??????:
      [1]???? ????? CRL
      ??? ???? ???????:
      ????? ??????:
      URL=http://server1.name.com/CertEnroll/caname.crl
    • ??????? ??????? = ??????? ??????
    • ?????? ???????? [??? ??????? = ??????? ? ??? ??? ?????? = ???] (???????)
    • ????? ??????? ??????? =
      • ?????? ?????? (1.3.6.1.5.5.7.3.2)
        (?????? OID) ??????? ??????? ??? ???????? ??? ??????? SSL).
      • ????? ???? ??????? ?????? (1.3.6.1.4.1.311.20.2.2)
    • ????? ?????? ??????? = ???? ???: ????? ??????? (UPN) =. ??? ???? ??????:
      UPN = user1@name.com
      OID OtherName UPN: "1.3.6.1.4.1.311.20.2.3"
      ???? OtherName UPN: ??? ?? ???? ????? ????? ASN1 UTF8
    • ??????? = ?????? ??? ????????. ???? ??? ????? ??? ???? ?????? ???? ??????? ??? ????? ???????.
  6. ???? ????? ????? ?????? ?? ???????? ??????. ???? ??? ???????? Only(AT_SIGNATURE) ????? ? Exchange(AT_KEYEXCHANGE) ?????. ??? ?? ???? ??? ???????? ????? ???? ??????? ?????? ??? ??? ????? ??? Exchange(AT_KEYEXCHANGE) ????? ?? ??? ????? ?????? ???????? ??????? ?????? ????? ???? ????.
  7. ????? ??????? ?????? ?????? ???? ????? ??????? ??????.

    ???? ?? ????? ?????? ?????? ??????? ???? ??????? ?????? ???????? ??? ???? ????? ??????? ??????. ??? ????? ??? ?????? ???? ??????? ??????.
  8. ????? ????? ??????? ?????? ???? ?????? ??? ???? ??? ??????? ??????.

    ??? ?? ?? ??? ??????? ?????? ?????? ?? ?????? ?????? ?????? ??????? ?????? ?? ????? ??????? ?? ?????? ??? 4 ? ?? ???? ??????? ??????? ??? ?????? ?????? ????????. ?????? ????:
    1. ??? ?? Microsoft ???????? (MMC) ???? ????? ??? ?????? ???????? ????????.
    2. ?? ???? ???? ??????? ??? ???????, ???? ??? ????????.
    3. ?? ??????? ???? ??????, ???? ??? ??????? ?????? "????? ??????? ????????".
    4. ???? ??? ????? ???? ????? ??? ???????? ???? ???? ?????????.

      ??????: ??? ??? ????? ???? ????? ??? ???????? ??? "????? ????????? ???????" (PKCS # 12) ? ???? ???? ?????? ????????? ?????? ?????? ???????? ? ???? ??? ????? ???? ???????? ???????? ??? ???? ?? ??????? ????? ???? ??????? ??? ?? ????? ??????? ??????? ??????? ????? (??? ??? ???? ??????? ??? ??????).

      ??????: ??? ???? ??????? ??? ????? ????? ???????? ???????? ?????? ??? ??????? ??????? ??????? ?????.
    5. ??? ?????? ??? ??????? ?? ???? ?????? ?????? ??? ??? ???????? ????????.
  9. ????? ????? ??????? ?????? ???? ?????? ??? ??????? ??????. ????? ?????? ???? ????? ???????? ??? ???? ???? ??????? (CSP) "?" ??? ???? ??????? ??????. ???? documentations ????? ??????? ?????? ??? ???????.
  10. ?? ?????? ?????? ??? ???? ????? ?? ??????? ??????.

??????? ????????

????? ????? ?????? ???????? ??????? ?????? ?????? ????? ????? ?????? ??????:
?????? ?? ?? ????? ??????. ???? ?????? ?? ?????? ???????? ?????? ??.
??? ????? ??? ???? ????? ???? ?? ???? ????? ????? ?? ???? ?? ?????? ?? ???????? ??????? ?????.

????? ??????? ????????

  • ??? ???? ???? ?????? ?? ???? ????? ???? ?????? ???????.
  • ??? ????? ????? SubjAltName ????? ??????? ?????? ???? ???. ?? ???? ???? ????????? ?? ??? SubjAltName ?? ????? ???? / ASCII ???????? ??????? ? ????? ???? ??? ASN1 / UTF-8.
  • ???? ???? ?????? ??? ????? ??? ???? ???? ?? ??? ?????.
  • ??? ?? ??????? ??????? ??? ??? ????? ???? ???? ??????? ????? ?????. ??? ????? ?????? ?????? ???? ???? ???? ???? ????? ????? ????? ???? ?????? ??????? ???? ??? ??????? ???? ??????? ? ????? ???? ????? ?? ??? ????? ???? ???? ??????? ?????.
    • ????? ?????? ????? ???? ?????? ???????.
    • ???? ???? ?????? ??? ????? ??? ????? ??. ?? ????? ??? ???? NTAuth ????? ????? ????? ?????? ?????? (CA) ??????? ????? ???? ?????? ??????? CA ? ??? ???? ?????? ??? ???? NTAuth ?? ?????? ??? ????? DC ?? ???? ???? ????? ?????? ?? ???? NTAuth ?????? ???? ???????.

      ??? ????? ?????? ??????? ?? ????? ????? ??????? ?????? ?? ??? "?????? ?????? ?????" ???? ???? ????? ???? ?????? ??????? ? ?? ???? ????? ????? ????????? ??? ????? ??? "?????? ?????? ?????".
    • ??????? ?????? ??? ????? ??? ????? ??. ?? ????? ??? ???? NTAuth ????? ????? ????? ?????? ?????? (CA) ?????? ??????? ?????? CA ? ??? ???? ?????? ??? ???? NTAuth ?? ?????? ??? ????? ??????? ?????? ?? ???? ???? ????? ?????? ?? ???? NTAuth ?????? ???? ???????.

      ??? ????? ?????? ??????? ?? ????? ????? ??????? ?????? ?? ??? "?????? ?????? ?????" ???? ???? ????? ??????? ?????? ? ?? ???? ????? ????? ????????? ??? ????? ??? "?????? ?????? ?????".
    • ?? ??? ????? ????? ??????? ?????? ?? ???? ???????? ??? ???? ?????. ??? ?? ???? ??????? ???? ?? ??????? ??? ??????? ?????? ??? ???? ????? ??????? ?????? ?? ??????? ??????? ???????? ???? ??? ?????? ?????? ???????? ??????.

      ??????: ?? ???? ???? ?????? ??????? ????? ?? ??? ????? ???????? ??? ???? ?????. ??? ????? ???? ??? ??????? ??? ??????? ??????.
    • ?? ??? ????? ????? ??????? ?????? ?????? ?? ??????? ????? ??? ??????? ??????. ??? ????? ????? ??????? ?????? ???? ??? ??????? ?????? ?? ??????? ????? ?? ??? ?? ????? ??????? ????? ????? ?? ??? ????? ???????? ??????? ?????? ??? ???? ????? ??????? ??????.
    • ?? ???? ??????? ????? ??????? ?????? ?? ???? ??????? ??????. ???? ?? ???? ??? ????? ?? ??????? ???? ??????? ?????? ?? ?????? ????? ???? ??????? ??????. ???? ?? ??? ????? ??????? ?????? ?????? ???? ??????? ?????? ???? ??????? ???????? ????? ??? ??????? ??????.
    • ????? ?????? ????? ??????? ??????.
    • ?? ???? ???????? ??????? ????? (UPN) ????? ?? ???? SubjAltName ????? ??????? ??????.
    • ??? ????? UPN ?? ????? SubjAltName ????? ??????? ?????? ???? ???. ?? ???? ???? ????????? ?? SubjAltName ?? ????? ???? / ASCII ???????? ??????? ? ????? ???? ??? ASN1 / UTF-8.
    • ??????? ?????? ??? ????? ??? ???? ???? ?? ??? ?????. ??? ?? ??? ?????? ??? ??? ????? ??????? ?????? ???? ????? ?? ?????? ??? ??????? ?????? ?? ?? ??????? ??????? ????? ????????? ??? ???? ????? ??????? ??????. ??? ?? ????? ????? ??????? ?????? ??????? ?? ???? ?????? ?? ??? ??????? ???? ????? ??? UPN ?????? ???? ???? ?? ??? SubjAltName.

      ??? ????? ?????? ????? ??????? ?????? ???? ?? ??? ????? ????? ????? ??????? ?????? ???? ??? ????? ???? ??????? ????? ????? ?? ??? ????? ??????? ?????? ?????.
    • ??? ??? ???????? UPN ??????? ?? ???? ???????? "Active Directory". ??? ?? ???? ??? ???? ???????? ?? "Active Directory" UPN ???? ?? ????? userPrincipalName ???? ?????? "Active Directory" ?????? ??????? ??????.
    • ?? ????? UPN ?? ??????? UPN ??????? ?? ???? ???????? ?? "Active Directory" ????? ?????????. ??? ?? ????? UPN ?? ???? ???????? Active ?????? ??????? ?????? ?? ????? ??????? ?????? ???? UPN ?????? ?? ??? SubjAltName ????????? re-issue UPN ?? ???? ???????? ?? "Active Directory" ?????????? ??????? ??????. ?? ???????? ?? ??????? ?????? UPN ?????? ??? ?????? ???????? userPrincipalName ????? ????? ???? ??????. ??? ???? ??? ??? UPN ?? ??????? ? implict UPN ? ???? (????? samAccountName@domain_FQDN) ? UPN ??? ??????? ??????? userPrincipalName ???? ????.

????? ?????? ?? ???????

??? ??? ????? ??????? ??? ???? ???? ?????? ??????? ?? ??? ????? ????? ???? ??????? ?????? ? ???? ???? ???? ?????? ????? ??????. ?? ???? ???? ???? ?????? ?? ????? ????? ???? ?????? ?? ????? ????? ???????:
?????? ?? ?? ????? ??????. ?? ??? ?????? ?????? ??????? ?????? ????????? ????????.
??????: ??? ?? ?????? ??? ????? ????? ???????? (CRL) "?" CRL ??? ???? "," ????? ????? "?" ???? ????? ?? "?????" ?????? ???? ????? ??? ???????.

??? ?? ???? ????? ??????? ?? ?? ?? "??????" ? "???? ?????? ???????. ???? ?? ???? ??? ??????:
  • ?????? ?? ??????? ?? ??? ????? ?????.

    ????? ?????? ?? ????? ??????? ????? ?? ???? ????? ?????. ??? ?? ????? ???? ????? ??????? ????? ??? ?? ???? ??? ???????.
  • ????? ?? ????? CA ???????? ?????? ?????? ????? ?? ????? ??????? ??? ???? CDP ???? ?? ???????.
  • CRL ????? ??? ??? "??????? ??????" ??? CRL ?????. ????? ?????? ?? ?? CRL ????? ??? ???????? ?? CDP ???? ?? ???? ????? ?? Internet Explorer. ??? ?? ???? ?????? ??? ??????? ?????? CRL ?? ?? ???????? ??? ?? ????? (HTTP) ?? CDPs ???????? ??? ??????? (FTP) ?? Internet Explorer ?? workstation(s) ??????? ?????? ??? controller(s) ??????.
???? ?? ?? ?? ???? HTTP ? FTP CDP ????????? ?? ??? ???? ?????? ?? ??????? ?????? ?? ????? ????? ???????.

?????? ?? ??? CRL ????? ????? ??????? ?? FTP ?? HTTP CDP:
  1. ???? "??????? ???????" ? ???? ????? ??????? ??? ??? .cer ?? ???? ????? ??????? ??? ??????? ?? ??????.
  2. ???? ??? ????? ??????? ?????? ?? ???????? ???? ????? ???? ????? CRL.
  3. ?? ????? ?????? ????? FTP ?? HTTP ???? ???? ????????? (URL) ???? ?? ?? ?????.
  4. ???? Internet Explorer ?? ??? URL ?? ???? ????????.
  5. ??? ???? ???????? ??? ?????? ??? ??? CRL.
  6. ???? ?? ??? ???? ??? ??????? ?????? ?? CRL ?? ?????? ????? ?? ??? ??????? ??????.
?????? ?? ?????? ?? ??? ?????? ?????? ?????? ?????? ???????? (LDAP) CDP ??? ????? ?????? ??? ?? ??? ??????? ????? CRL. ??? ????? ???? CRL ???? ?? ?? ???? ??? ??????? ?????? ?? CRL ?? ?????? ????? ?? ??? "??????? ??????".

?????

?? ???? ????? ??? ?????? Microsoft ????? ????? ???? ??????? ?????? CA ??? ?????? ??? ?? ????? ?? ???? ?? ???? ?? ??????? ??????? ??????? ???????:
  • ????? ??????? ??? ????.
  • ???? ??????? ?? ???? ??????? ??? ?????? ?? ???? ???? ???? ??????.
  • ?????? ????? ??????? ?? ???? ???? ???? ??????.
  • ?? ???? ??? CA ???? ?????? ??? "Active Directory".
  • ????? CSP ???? ??????.

??????? ??????

?????? ?? ????????? ?????? ????? ???? ?????? ???????. ????????? ?????? ????? ???? ?????? CRL ?????? ??? ????? ???? ?????? ??????? ?? ????? ??????? ?????? CRL.

?? ????? ????? ????? ?????? ??? ????? ???????? ????? ???????? ??????? ?????? ???.

???? ???? NTAuth ??? ????? ?????? ??? ??????? ???? ????? ?? ?????? ??? "??? ????????" ??????? ?????? ????? ?????? ??? ????? "??? ????????":
dsstore.exe - ??????

????? ???? ????? ??????? ??????? ?????? ?? Windows Server 2003 ??? Windows XP ???????? ????? Certutil.exe - scinfo.

???????

???? ???????: 281245 - ????? ??? ??????: 12/????? ??????/1430 - ??????: 6.0
????? ???
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard
  • Windows Server 2008 Datacenter without Hyper-V
  • Windows Server 2008 Enterprise without Hyper-V
  • Windows Server 2008 Standard without Hyper-V
????? ??????: 
kbmt kbenv kbinfo kbtool KB281245 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????281245

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com