Forgive my ignorance, but I have read about four articles on trust anchors and I still don't understand what they are. Can someone possibly give me an example of a trust anchor and its purpose so I can fully understand what they are?- Michael

On Thu, 30 Dec 2010 14:37:27 +0000, Michael_Andrews wrote: Forgive my ignorance, but I have read about four articles on trust anchors and I still don't understand what they are. Can someone possibly give me an example of a trust anchor and its purpose so I can fully understand what they are? This is probably the simplest explanation: http://en.wikipedia.org/wiki/Trust_anchor Paul Adare MVP - Identity Lifecycle Manager http://www.identit.ca Want custom ringtones on your Windows Phone 7 device? Where the system is concerned, you are not allowed to ask "Why?".

I had already read that along with a few others. I guess what I'm not grasping is how you set one up and what it exactly does. Do you have one for each domain, or do you just have one per DNS server. How do you go about setting one up?- Michael

On Thu, 30 Dec 2010 19:47:04 +0000, Michael_Andrews wrote: I had already read that along with a few others. I guess what I'm not grasping is how you set one up and what it exactly does. Do you have one for each domain, or do you just have one per DNS server. How do you go about setting one up? So you're looking to setup DNSSEC or a PKI using Certificate Services? Without any context, just saying you want to setup a trust anchor really doesn't mean much of anything. Paul Adare MVP - Identity Lifecycle Manager http://www.identit.ca Want custom ringtones on your Windows Phone 7 device? There must be more to life than compile-and-go.

Well I apologize, I guess I just don't understand what they do. Are they domain specific? - Michael

On Thu, 30 Dec 2010 20:07:49 +0000, Michael_Andrews wrote: Well I apologize, I guess I just don't understand what they do. Are they domain specific? Sorry are you back to trust anchors again or are you asking about DNSSEC and PKI? If the latter then: http://en.wikipedia.org/wiki/DNSSEC http://en.wikipedia.org/wiki/Public_key_infrastructure Paul Adare MVP - Identity Lifecycle Manager http://www.identit.ca Want custom ringtones on your Windows Phone 7 device? You might have mail.