Hi, For an active directory user account, is there a limitation to the number of certificates published for the user account(Under the Published Certificates tab inside User AD properties)? . Will there be an impact on the performance if i have many different sets of certificates?

AFAIK, the Published Certificates tab allows the creation of a list of X.509 certificates for the user account. To know more about X.509 certificates, please refer below articles. X.509 Public Key Certificates http://msdn.microsoft.com/en-us/library/windows/desktop/bb540819(v=vs.85).aspx X509 Certificates On Windows Server 2003 http://www.stevefenton.co.uk/Content/Blog/Date/201101/Blog/X509-Certificates-On-Windows-Server-2003/ Installing X.509 encryption certificates in Windows http://searchwindowsserver.techtarget.com/tip/Installing-X509-encryption-certificates-in-Windows I couldn't find any reference or documentation in regards to max or min no. of certificates that can be published. X.509 certificates are published for SSL-enabled services, such as HTTP, SMTP, IMAP, POP etc...there shouldn't be any impact which depends on no. of certificates issued. You might also want to create a new thread in Security Forum for more details. Hope that helps. Vote As Helpful, if you find my information useful ! This posting is provided "AS IS" with no warranties or guarantees and confers no rights.

Hello, you may ask this in the security forum: http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

For CA queries, post here. http://social.technet.microsoft.com/Forums/en/winserversecurity/threads Thanks

Hello, There shall be no limitation to the number of published certificates for certain account as far as I see. If you are looking for a script with the function of exporting the published certificates of a certain user, see this: List Published Certificates for a User Account http://gallery.technet.microsoft.com/scriptcenter/15680241-97c3-4629-8168-a1a742ebc2bb Hope it helps. Thanks ZHANG

Hello, There shall be no limitation to the number of published certificates for certain account as far as I see. If you are looking for a script with the function of exporting the published certificates of a certain user, see this: List Published Certificates for a User Account http://gallery.technet.microsoft.com/scriptcenter/15680241-97c3-4629-8168-a1a742ebc2bb Hope it helps. Thanks ZHANG