Resources For IT Professionals
Post an article
Wikis - Page Details
  • First published by
  • When: 17 Jun 2011 3:59 PM
  • Last revision by (eMicrosoft Community Contributor, Microsoft Partne)
  • When: 5 Feb 2013 11:42 AM
  • Revisions: 10
  • Comments: 6
Options
RSSSubscribe to Article (RSS)
Can You Improve This Article?
Positively! Click Sign In to add the tip, solution, correction or comment that will help other users.

Report inappropriate content using these instructions.
Wiki  >  TechNet Articles  >  Errata in Windows Server® 2008 PKI and Certificate Security from MS Press

Errata in Windows Server® 2008 PKI and Certificate Security from MS Press

Errata in Windows Server® 2008 PKI and Certificate Security from MS Press

This article has been created in response to customer issues that have been brought up to Microsoft Support, forums, and other community connection points. The official location to submit errata for the Windows Server® 2008 PKI and Certificate Security book by Brian Komar is on the O'Reilly Web Site (http://www.oreillynet.com/cs/catalog/create/errata/?b=13153). The purpose of this article is to organize errata for submission and allow people to contribute to the errata reporting rapidly as a community. This article is not meant to discourage people from reading this commonly recommended and praised book - instead, you are encouraged to read the book with the knowledge that there are a few issues inside.

Chapter
 Title
Page
 Error Description
Additional notes
 6  CAPolicy.inf sample  134  In the book :
CRLPeriod=3
CRLPeriodUnits=days
CRLOverlapPeriod=4
CRLOverlapPeriodUnits=hours
CRLDeltaPeriod=12
CRLDeltaPeriodUnits=hours

Use the following instead as (overlaps are not read from CAPolicy.inf):
CRLPeriod=3
CRLPeriodUnits=days
CRLDeltaPeriod=hours
CRLDeltaPeriodUnits=12

 Confirmed
 6 Implementing a CA Hierarchy
 135
Example CAPolicy.inf is missing [Cert_Server] section just above renewlkeylength=2048
Pending triage
 10 Certificate Revocation  219 On the Extensions tab, select the added Online Responder URL, select the Include In The AIA Extension Of Issued Certificates and Include In The Online Certificate Status Protocol (OCSP) Extension check boxes, and then click OK.

Should read:

On the Extensions tab, select the Issued Certificates and then select Include In The Online Certificate Status Protocol (OCSP) Extension check box, and then click OK.

 Pending triage
 10 Certificate Revocation  219  To designate that the URL is included in the AIA extension and is published as an OCSP extension, a value of 34 is assigned.

Should read:

You should not select Include in the AIA extension of issued certificates when specifying the AIA for OCSP. You should select only Include in the online certificate status protocol (OCSP) extension, otherwise OCSP will appear as broken in the Enterprise PKI (pkiview.msc) application.		  Confirmed
 10 Certificate Revocation   221 By selecting the Auto-Enroll for an OCSP Signing Certificate check box, the OCSP Responder will automatically enroll and renew its OCSP signing certificate per the renewal settings in the certificate template.

Should read:

The OCSP Signing Certificate should not have the Autoenroll checkbox selected. The renewal will happen automatically without the autoenroll checkbox selected. Do not select the autoenroll checkbox because OCSP enrollment will not work properly if you do.
  Confirmed
         
         
         

 Additional references:
- OREILLY: Books and Videos: Unconfirmed Errata for Windows Server(r) 2008 PKI and Certificate Services
- OREILLY: Books and Videos: Confirmed Errata for Windows Server(r) 2008 PKI and Certificate Services

, , , , , , , , , , [Edit tags]
Leave a Comment
  • Please add 2 and 2 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • 28 Sep 2012 9:43 AM

    Kurt L Hudson edited Revision 7. Comment: Corrected the CAPolicy.inf definitions

  • 23 Apr 2012 8:35 PM

    Kurt L Hudson edited Revision 6. Comment: updated based on feedback from Brian Komar and PFEs

  • 28 Feb 2012 9:35 PM

    Ed Price - MSFT edited Revision 4. Comment: Tags and space formatting

  • 15 Feb 2012 9:01 AM

    Kurt L Hudson edited Revision 2. Comment: Updated based on DL discussion and forum thread

  • 18 Jul 2011 9:49 AM

    Kurt L Hudson edited Original. Comment: Added some new comments from additional reports as well as links to the O'REILLY errata page

Page 1 of 1 (5 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Posted by
    on 28 Sep 2012 11:45 AM

    Good Article.

  • Posted by
    on 28 Sep 2012 9:43 AM

    Kurt L Hudson edited Revision 7. Comment: Corrected the CAPolicy.inf definitions

  • Posted by
    on 23 Apr 2012 8:35 PM

    Kurt L Hudson edited Revision 6. Comment: updated based on feedback from Brian Komar and PFEs

  • Posted by
    on 28 Feb 2012 9:35 PM

    Ed Price - MSFT edited Revision 4. Comment: Tags and space formatting

  • Posted by
    on 15 Feb 2012 9:01 AM

    Kurt L Hudson edited Revision 2. Comment: Updated based on DL discussion and forum thread

  • Posted by
    on 18 Jul 2011 9:49 AM

    Kurt L Hudson edited Original. Comment: Added some new comments from additional reports as well as links to the O'REILLY errata page

Page 1 of 1 (6 items)