???? ID: 295663 - ????? ???????: 03 ?????? 2010 - ??????: 2.0

?????-???? ?????????? ?????????? (CA) ?????? ???? ?? ??????????? NTAuth ?????? ??? ???? ???? ?? ??? ???? ????

???? ?????? ???????????? ?????? ???????? KB ?? ???????? ????? ?? ??? ???? ????? ????
?? ???????? ?? ?????? ??? ?? ?? ???? ???? ???? ??.
?????? ??????This article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

?? ????? ??

??? ?? ??????? ???? | ??? ?? ??????? ????

?????

?? ???? ????? ???? ?? ?? ?? ??????? ?? ????? ?? ?????-???? ?????????? ?????????? (CAs) ?? ?????? ???? ?? ??????????? NTAuth ?????? ??? ???? ???? ?? ??? ?? ???? ???? ??? ?? ???? ?????-???? CA ????? ??????? ????? ????? ?? ????? ???????? ?????????? ?? ??? ????? ??? ?? ??? ?? ????????? ?????? ??? ????? ???? CA ?????????? ?????????? NTAuth ?????? ???? ?? ??? ???????? ?? ??? ??, ?????? ?????????? ?? CA ?????? ?? ?????????? ????? ???? ?? ??? ????????? ??? Windows CAs ?? ?????? ???? ?? ??? ???????? ??? ?? ???? CA ?????????? ?????????
????? ?? ???? ????

???? ???????

NTAuth ?????? ??? ??? ?????? ?????????? ?????????? ???? ???????? ??? ????? ?? ?? ??configuration???????? ?? ??????? ??????? ??????????? ?????? ????????? (LDAP) ???????? ??? ????? ?? ???? ???? ??:
CN NTAuthCertificates, CN = ????????? ????? ??????, CN = ??????, CN = ???????????, DC = MyDomain, DC = = com
?????????? ?????? ???? ?? ??? ???? ??? NTAuth ???? ?? ??? ????????cACertificate???-valued ???????? ?? ??????? ?? ??? ??? ?????? ???? ?? ???? ?? ??? ?? ??????? ??????? ????
????? ?? ???? ????

???? 1: PKI ????????? ????? ?? ????? ?? ??? ?????? ???? ????

PKI ????????? ????? (PKIView), ??? MMC ?????-?? ??? ?? ?? ?? ???? Microsoft Windows ?????????? ?????????? ?? ???? ????????? ????? ????????????????? (PKI) comprise ?? ?????? ????????? ???? ??? ?????? ?? Windows Server 2003 ?????? ??? ????? ?? ?? ??? ?? ??? ???? ?? ??????? ?? ??????? ???? ?? ??? ????? Microsoft ??? ???? ?? ????:
HTTP://www.Microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en (http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en)
PKIView ?? CA ?????????? ?? ???? ??? ??????? ????? ???? ?? ?? ?? ?????????? ??? ???????? CA ?????????? ???????? ???? (CRLs)? ???, PKIView validates ?????? ???? ?? CRLs ????????? ???? ?? ?? ????? ??? ???? ??? ?? ??? ???? ??? ????? ?? ??? ?? ?? ?? ???? ??? ???, ??? PKIView ??????? ??????? ?? ??? ?????? ??????? ???????

PKIView Windows Server 2003 ?????????? ?????????? ?? ?????? ??????????? ?? ???????? ??? ??????? ?? ?????? ?? ????????? ???? ??? ?? ??? PKI ???, subordinate ???? ?? ??? ???? ?? ??? PKIView ?? ??? ???? ??????????? CA ?? ??????? CAs ?? ????? ?? ????? ????? ?????????? PKI ??????, ???? CA ??? ??????? ?? NTAuth ??????, ??? ??????????? ???????? ?? ?? ?????? ??????????? ?? ???????? ?? ?? ????? ??? ?? ?? ?? ?????? ?? ????? ?? ???? ?? latter ??????????? ?? ????? ???? ??? PKIView ?? ???? ??? ???? ??????? ?? ??? Microsoft Windows Server 2003 ?????? ??? ????? ?? ???????? ??????

???:?? Windows 2000 CAs ?? Windows Server 2003 CAs ?? ??????? ???? ?? ??? PKIView ?? ????? ?? ???? ???? Windows Server 2003 ?????? ??? ????? ?? ??????? ???? ?? ??? ???? ???????? ????? ?????? Windows XP ?? ??? ????

CA ?????????? ???? ??????????? NTAuth ?????? ??? ???? ????, ????? ????? ?? ???? ????:
  1. ?????? ???? ?? CA .CER ????? ??? ??????? ????? ????? ????? ?????? ??????? ???:
    • DER ???????? ??????? X.509 (.cer)
    • ????-64 ???????? X.509 (.cer)
  2. Windows Server 2003 ?????? ??? ????? ??????? ????? ????? ?????? Windows XP ?? ???????? ?? ?? ??? ????
  3. Microsoft ??????? ????? (mmc.exe) ?? ??????? ????, ?? ???? ??? PKI ????????? ?????-?? ??????:
    1. ????? ????????????? ??,?????/??????? ?????-??.
    2. ????? ?????????????????, ?? ???? ??? ????? ????add??? ???
    3. ?????-?? ?? ???? ??? ????? ?????????????? PKI.
    4. ????? ????,add?? ????-????? ????, ?? ???? ?????? ????.
    5. ????? ????,OK.
  4. ????-????? ?????????????? PKI?? ????-????? ????, ?? ???? ???AD ?????? ???????? ????.
  5. ????? ????NTAuthCertificates??? ????? ????, ?? ???? ???add.
  6. ????? ???????????? ??,?????.
  7. ?????? ????? ?? ???? ??? CA ?????????? ????? ????, ?? ???? ???OK???? ???? ?????
????? ?? ???? ????

???? 2: Certutil.exe ?? ????? ?? ??? ?????? ???? ????

Certutil.exe ?? ???? Windows CA ???????? ???? ?? ??? ?? ????-?????? ?????? ??? Windows Server 2003 ??? ?? ?????????? ?????? ?????????? ??? ???????? ???? ?? ??? Certutil.exe ?? ????? ?? ???? ???? Certutil.exe ?? ??? Windows Server 2003 ??????? ??? ?? ?? ?????? ?? Microsoft Windows Server 2003 ?????????? ????? ??? ?? ??? ?? ??? ???? ?? ??????? ???? ?? ??? ??? ????? ?? ???, ????? Microsoft ??? ???? ?? ????:
HTTP://www.Microsoft.com/downloads/details.aspx?FamilyID=c16ae515-c8f4-47ef-a1e4-a8dcbacff8e3 ?? DisplayLang ?? = (http://www.microsoft.com/downloads/details.aspx?FamilyID=c16ae515-c8f4-47ef-a1e4-a8dcbacff8e3&DisplayLang=en)
CA ?????????? ???? ??????????? NTAuth ?????? ??? ???? ????, ????? ????? ?? ???? ????:
  1. Export the certificate of the CA to a .cer file. The following file formats are supported:
    • DER encoded binary X.509 (.cer)
    • Base-64 encoded X.509 (.cer)
  2. At a command prompt, type the following command, and then press ENTER:
    certutil -dspublish -fFileNameNTAuthCA
The contents of the NTAuth store are cached in the following registry location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\NTAuth\Certificates
This registry key should be automatically updated to reflect the certificates that are published to the NTAuth store in the Active Directory configuration container. This behavior occurs when Group Policy settings are updated and when the client-side extension that is responsible for autoenrollment executes. In certain scenarios, such as Active Directory replication latency or when theDo not enroll certificates automaticallypolicy setting is enabled, the registry is not updated. In such scenarios, you can run the following command manually to insert the certificate into the registry location:
certutil -enterprise -addstore NTAuthCA_CertFilename.cer
????? ?? ???? ????
???? ???? ???? ??:
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Server
????? ?? ???? ????
??????: 
kbenv kbhowtomaster kbmt KB295663 KbMthi
????? ?? ???? ????
???? ?????? ???????????? ?????? ????????
??????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??.
?????????? ?? ??????? ????????? ??????? ??:295663  (http://support.microsoft.com/kb/295663/en-us/ )
????? ?? ???? ????