Article ID: 246535
Article Last Modified on 2/27/2007
APPLIES TO
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
This article was previously published under Q246535
SUMMARY
When upgrading a subordinate Certificate Authority (CA) running the Windows NT 4.0 Option Pack Certificate Server 1.0 to Windows 2000, a CA renewal operation must be performed after the Windows 2000 upgrade to create a new CA certificate with the Basic Constraints field set to TRUE for CA.
MORE INFORMATION
Prior to Microsoft Windows NT 4.0 Service Pack 6, the Certificate Server 1.0 product did not set the CA value to TRUE in the Basic Constraints field of the CA certificate. In Service Pack 6 for Windows NT 4.0, the CA value is set to TRUE in the CA certificate if the CA is being installed for the first time. In Windows 2000 the CA value is set to TRUE in the CA certificate if the CA is being installed for the first time or if a CA renewal operation is being performed on an existing CA.
Keywords: kbinfo KB246535
