Question regarding renewing an issuing CA cert.
Is it possible to change the DN of the issuing CA cert in addition to issuing a new key? Our Websphere folks basically use one keystore for everything. We've just renewed our issuing CA cert (same DN, new key) which the web people have added to their keystore, which basically gave them...same DN = old keysame DN = new keyThe problem is that some of our purchased Websphere applications just look at the DN and aren't smart enough to figure out which key to use. We cannot do a wholesale update of all of our Websphere apps to the new key (they'd lock me up for suggesting it)... so I'm curious if I can change the DN as well? This would allow the apps to differentiate which certificate to use. I suppose we could resign the old key but doesn't that defeat the purpose?Thanks for any help you can give.
January 20th, 2009 7:36pm
HI,Before we go further, could you please help to collect the following information for research?1. What do you mean by "DN"? Is it Active Directory Distinguished Name? Please let us know your current DN.2. Do you use your own CA or a third party CA? 3. Let us know the new DN you would like to change.Thanks. This posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
January 21st, 2009 1:08pm
By DN, I'm referring to the identifying information within the certificate... http://msdn.microsoft.com/en-us/library/aa381979(VS.85).aspxI think what's really the cause of my particular issue is that I need to change the common name of the issuing CA cert. Our environment is a stand-alone root and integrated issuing. The more I look at this the less I thinks its possible. I'm just in denial that I'm going to have to build a need issuing CA to fix this.
January 21st, 2009 5:51pm
Hi,
As far as I know, we cannot change CA name or path without reinstalling it.
Also, this issue related to programming. I suggest that you initial a
new post in the MSDN form to get further support there. They are the
best resource for development related problems.
For your convenience, I have list the link as followed.
MSDN Forum
http://forums.microsoft.com/MSDN/default.aspx?SiteID=1
Thanks.
This posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2009 8:16am