Vista - OCSP Responder (OCSP server configuration) in Windows Vista

Hi,
is there any body able to guide
- PKI enhauncements in windows vista.
- I heard Microsoft provided built-in OCSP responder / Server in
windows Vista, is it correct? If yes which windows Vista version contains
OCSP server (in windows Vista ultimate or windows Vista
business ...)?
- How to configure/manage OCSP responder (OCSP Server) in windows
Vista?
- is there any OCSP client available in windows Vista? if yes how
to configure OCSP client in windows Vista.
- Smart card logon support and Kerbrose in windows Vista.

help appriciated.

Thanks,

Best Regards
Atiq Ur Rahman Chaudhary

how to install certificate services? Does windows Vista ultimate supports to
install active directory and certificate services?


--
> Hi,
> is there any body able to guide
> - PKI enhauncements in windows vista.
> - I heard Microsoft provided built-in OCSP responder / Server
in
> windows Vista, is it correct? If yes which windows Vista version contains
> OCSP server (in windows Vista ultimate or windows Vista
> business ...)?
> - How to configure/manage OCSP responder (OCSP Server) in
windows
> Vista?
> - is there any OCSP client available in windows Vista? if yes
how
> to configure OCSP client in windows Vista.
> - Smart card logon support and Kerbrose in windows Vista.
>
> help appriciated.
>
> Thanks,
>
> Best Regards
> Atiq Ur Rahman Chaudhary
>
>
>

On Tue, 3 Apr 2007 17:42:39 +0500, Atiq UR Rahman Chaudhary wrote:

> Hi,
> is there any body able to guide
> - PKI enhauncements in windows vista.
> - I heard Microsoft provided built-in OCSP responder / Server in
> windows Vista, is it correct? If yes which windows Vista version contains
> OCSP server (in windows Vista ultimate or windows Vista
> business ...)?

Vista only contains a client, not a server. The server will be in Longhorn.

> - How to configure/manage OCSP responder (OCSP Server) in windows
> Vista?

As above.

> - is there any OCSP client available in windows Vista? if yes how
> to configure OCSP client in windows Vista.

Built-in nothing to configure.

> - Smart card logon support and Kerbrose in windows Vista.

I don't understand this it isn't really a question.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea

On Tue, 3 Apr 2007 19:47:46 +0500, Atiq UR Rahman Chaudhary wrote:

> how to install certificate services? Does windows Vista ultimate supports to
> install active directory and certificate services?

No, Vista is a client OS, like XP.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea

Dear Paul
Thank you for your quick response, can you please guide me is there any
interface to configure/view builtin OCSP settings in windows Vista?

Regards







"Paul Adare" <pkadare@gmail.com> wrote in message
news:bel5g2dqq2zo.125tmcoqtwwsm$.dlg@40tude.net...
> On Tue, 3 Apr 2007 17:42:39 +0500, Atiq UR Rahman Chaudhary wrote:
>
> > Hi,
> > is there any body able to guide
> > - PKI enhauncements in windows vista.
> > - I heard Microsoft provided built-in OCSP responder / Server
in
> > windows Vista, is it correct? If yes which windows Vista version
contains
> > OCSP server (in windows Vista ultimate or windows Vista
> > business ...)?
>
> Vista only contains a client, not a server. The server will be in
Longhorn.
>
> > - How to configure/manage OCSP responder (OCSP Server) in
windows
> > Vista?
>
> As above.
>
> > - is there any OCSP client available in windows Vista? if yes
how
> > to configure OCSP client in windows Vista.
>
> Built-in nothing to configure.
>
> > - Smart card logon support and Kerbrose in windows Vista.
>
> I don't understand this it isn't really a question.
>
> --
> Paul Adare
> MVP - Windows - Virtual Machine
> http://www.identit.ca
> "The English language, complete with irony, satire, and sarcasm, has
> survived for centuries without smileys. Only the new crop of modern
> computer geeks finds it impossible to detect a joke that is not clearly
> labeled as such."
> Ray Shea

On Tue, 3 Apr 2007 23:48:02 +0500, Atiq UR Rahman Chaudhary wrote:

> Thank you for your quick response, can you please guide me is there any
> interface to configure/view builtin OCSP settings in windows Vista?

As with CRL checking, there aren't any. What kind of settings are you
looking for?

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea

- Enable / Disable Revocation checking
- Revocation checking order (CRL/OCSP)
- Add extensions in OCSP request (service location extension, Add
nonce extensions),
- OCSP Cache settings, OCSP setting
- CRL Chache, CRL settings and alerts etc...

Regards
--



"Paul Adare" <pkadare@gmail.com> wrote in message
news:14rfhkrp2jasx$.1kjpuy9tf4ip1$.dlg@40tude.net...
> On Tue, 3 Apr 2007 23:48:02 +0500, Atiq UR Rahman Chaudhary wrote:
>
> > Thank you for your quick response, can you please guide me is there any
> > interface to configure/view builtin OCSP settings in windows Vista?
>
> As with CRL checking, there aren't any. What kind of settings are you
> looking for?
>
> --
> Paul Adare
> MVP - Windows - Virtual Machine
> http://www.identit.ca
> "The English language, complete with irony, satire, and sarcasm, has
> survived for centuries without smileys. Only the new crop of modern
> computer geeks finds it impossible to detect a joke that is not clearly
> labeled as such."
> Ray Shea

On Wed, 4 Apr 2007 00:18:24 +0500, Atiq UR Rahman Chaudhary wrote:

> - Enable / Disable Revocation checking

This is a function of the application to which the certificate is being
presented is configurable, or not, on an application by application basis.

> - Revocation checking order (CRL/OCSP)

I don't believe this is configurable.

> - Add extensions in OCSP request (service location extension, Add
> nonce extensions),
> - OCSP Cache settings, OCSP setting

Not sure.

> - CRL Chache, CRL settings and alerts etc...

Not configurable.


--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea