Welcome to ISAserver.org

RMS Server publishing

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Web Publishing >> RMS Server publishing

Page: [1]

Message

<< Older Topic Newer Topic >>

RMS Server publishing - 30.Aug.2006 6:30:58 PM

Meeth

Posts: 2
Joined: 29.Aug.2006
Status: offline

Hi@all,

I published a RMS server from an internal network (private IP range) to our corporate network. In the internal network I have one DC, a RMS Server, ISA Server 2006, on the DC I installed a CA (RMS-CA). I configured a web listener with "SSL Client Certificate Athentication" and the web site publishing rule uses "Kerberos contrained delegation".

Now the problem, when an external client opens the RMS webservice (https://isaserver/_wmcs/certification/certification.asmx) via IE (for test only) the user is asked for a Clientcertificate. Only certificates are listed, that are from RMS-CA, but I also want to use client certificates from other CAs, so I added our CompanyRootCA and CompanyCA to the ADs NTAuthCertificates. I also installed the CompanyRootCA and CompanyCA at ISA Server, AD, external Client.

Know, when I try to use a smartcard with a certificate from CompanyCA on an external client I could not select the certificate in IE Clientcertificates dialog box. Where is the problem..?

Thanks in advance..

< Message edited by Meeth -- 30.Aug.2006 8:27:20 PM >

Post #: 1

Featured Links*

RE: RMS Server publishing - 1.Sep.2006 1:56:13 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Meeth,

What are you trying to accomplish and what's not working?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Meeth)

Post #: 2

RE: RMS Server publishing - 1.Sep.2006 2:46:46 PM

Meeth

Posts: 2
Joined: 29.Aug.2006
Status: offline

Hi Tom,

I want to pre-authenticate external clients at ISA Server with their smartcard.
The problem is that only certificates from the RMS-CA are presented in the Internet explorer certificate selection dialog on the external clients, although ISA trust our "CompanyRootCA" and "CompanyCA".

Martin

(in reply to tshinder)

Post #: 3

RE: RMS Server publishing - 2.Sep.2006 5:01:18 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Martin,

Can you add those certificates?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Meeth)

Post #: 4