Inter-networking with Partner Organizations

Microsoft® Certificate Server can be used to grant certificates to end-users within an organization so they can conduct secure communications across the Internet and gain access to the corporate intranet. Two examples:

1. Branch offices. The Internet supplements or serves as a corporate WAN.
2. Supplier/vendor relationships. Intranet access is granted to groups of users from key partners.

The Certificate Authority (CA) issuing the certificates can implement policies tailored to each specific case. An example of such a policy would include the following:

• Use authenticated RPC to receive certificate requests and transmit completed certificates.
• Check that the Issuer Organization and Issuer Organizational Unit information specified in certificate requests correctly identifies the CA server's organization (specified in the CA server's configuration file).
• Check that the Subject Common Name information specified in certificate requests matches the authenticated user name.