i asked the same question on the OSL, and Tyson confirmed the same! Cisco IOS rules , test crypto pki and crypto trustpoint only on routers ;) "no more windows genie jobs"
-----Original Message----- From: [email protected] on behalf of Tyson Scott Sent: Tue 12/21/2010 10:19 PM To: 'Anantha Subramanian Natarajan'; 'Aaron O'Conner' Cc: [email protected] Subject: Re: [OSL | CCIE_Security] Installing windows 2003 server asCA server If the vendor workbook is having you work on CA servers on Windows for the CCIE security exam then they are wasting your time on it. Yusuf has confirmed it to be removed from the Security Exam. Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: [email protected] <mailto:[email protected]> Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat <http://www.ipexpert.com/chat> eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities <http://www.ipexpert.com/communities> and our public website at www.ipexpert.com <http://www.ipexpert.com/> From: [email protected] [mailto:[email protected]] On Behalf Of Anantha Subramanian Natarajan Sent: Tuesday, December 21, 2010 12:54 PM To: Aaron O'Conner Cc: [email protected] Subject: Re: [OSL | CCIE_Security] Installing windows 2003 server as CA server I need help on setting the CA server on the windows 2003 server,was working on a vendor lab workbook and the task expected the server to be the CA server instead of the IOS device(seems this particular task may not be updated with respect to new lab setup) ..Not a big deal ..Thanks Aaron Regards Anantha Subramanian Natarajan On Tue, Dec 21, 2010 at 11:50 AM, Aaron O'Conner <[email protected]> wrote: Did you need help setting up CA services on the router? Or were you just testing on a Windows Server. From: Anantha Subramanian Natarajan [mailto:[email protected]] Sent: Tuesday, December 21, 2010 11:47 AM To: Aaron O'Conner Cc: [email protected] Subject: Re: [OSL | CCIE_Security] Installing windows 2003 server as CA server Thanks Aaron ..... Regards Anantha Subramanian Natarajan On Tue, Dec 21, 2010 at 11:47 AM, Aaron O'Conner <[email protected]> wrote: Anantha, You should be using the CA services on the Cisco IOS (router), and not Windows server during the lab. Aaron From: [email protected] [mailto:[email protected]] On Behalf Of Anantha Subramanian Natarajan Sent: Tuesday, December 21, 2010 11:37 AM To: [email protected] Subject: [OSL | CCIE_Security] Installing windows 2003 server as CA server Hi All, Trying to install a windows 2003 server as a CA server.During the process,by default it allows me to install it has a standalone CA server instead of a enterprise CA server.The purpose of the CA server is to provide digital certificates for the Lab Cisco IOS router/ASA.I am kind of understanding(I may be totally wrong,kindly correct me) that the CA server to be installed as enterprise CA server instead of stand alone CA server to acheive the above functionality. Considering the requirement of the enterprise CA server is valid,I kind of understood that,in order to make the windows 2003 server as the enterprise CA server,active directory is required and also the account to be the member of the enterprise admin group.So when proceeded to install the ADS,the system allows me to install the ADAM(Active directory application mode) and Identity Management for Unix and not the ADFS(Active directory Federation services(ADFS).While trying to install the ADFS,it gives me an error "In order to install this ADFS component,an SSL certificate must be installed on the default website in IIS". At this moment I am not sure,whether I am doing right steps to install the CA server and would like to have your comments/suggestions in doing it. Thanks for the help Regards Anantha Subramanian Natarajan _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
