Upgrade of Subordinate Certificate Authority from Windows NT 4.0 Certificate Server to Windows 2000

ID: Q246535

The information in this article applies to:

Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Server
Microsoft Windows 2000 Datacenter Server

SUMMARY

When upgrading a subordinate Certificate Authority (CA) running the Windows NT 4.0 Option Pack Certificate Server 1.0 to Windows 2000, a CA renewal operation must be performed after the Windows 2000 upgrade to create a new CA certificate with the Basic Constraints field set to TRUE for CA.

MORE INFORMATION

Prior to Microsoft Windows NT 4.0 Service Pack 6, the Certificate Server 1.0 product did not set the CA value to TRUE in the Basic Constraints field of the CA certificate. In Service Pack 6 for Windows NT 4.0, the CA value is set to TRUE in the CA certificate if the CA is being installed for the first time. In Windows 2000 the CA value is set to TRUE in the CA certificate if the CA is being installed for the first time or if a CA renewal operation is being performed on an existing CA.

Additional query words:

Keywords : kbtool
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbinfo