I am trying to implement OCSP in a DMZ, I have my Issuing PKI server in the core infastructure. I have implemented OCSP in the core infastructure but cannot do the same in the DMZ, this is because I am having issues with getting a OCSP signing certificate on the OCSP server in the DMZ. The OCSP server in the DMZ can see the Issuing CA but fails to obtain a certificate. I have also tried to use certreq to manually issue the OCSP signing certificate but this also fails. I am now stuck and I am wondering if my requirement is not a supported solution. Any help would be appreciated. John

Hello, please note that this is Directory Services forum. It will be better to ask in Security forum: http://social.technet.microsoft.com/Forums/en/winserversecurity/threads This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator