SMVN

Thanks for your update! If it is the case, then we will be in trouble when integrating with multiple AD Server. For example: I'm providing Certificate Authority for two different customers: A and B and both of them request me to publish their user certificate to the appropriate AD Server A and B. Then in this case, I've to create two different Certificate Profiles just to publish user certificate to proper AD Server. It will become massive because in most case, my customer might request different...

Thanks for your update! If it is the case, then we will be in trouble when integrating with multiple AD Server. For example: I'm providing Certificate Authority for two different customers: A and B and both of them request me to publish their user certificate to the appropriate AD Server A and B. Then in this case, I've to create two different Certificate Profiles just to publish user certificate to proper AD Server. It will become massive because in most case, my customer might request different...

Uppp, can someone help to answer my concern?

Hi all, I'm using EJBCA to configure a publisher (Microsoft AD Publisher) and see in the EJBCA documentation that : Once created, a Publisher is active when it has been selected in a CA or a Certificate Profile. The situation is, I would like to configure my CA that whenever an end entity certificate is enrolled by this CA, the issued certificate will be published to my Microsoft Active Directory server. In order to do that, first I need to create an AD Publisher. The problem is: When I configure...

Hi all, I'm using EJBCA to configure a publisher (Microsoft AD Publisher) and see in the EJBCA documentation that : Once created, a Publisher is active when it has been selected in a CA or a Certificate Profile. The situation is, I would like to configure my CA that whenever an end entity certificate is enrolled by this CA, the issued certificate will be published to my Microsoft Active Directory server. In order to do that, first I need to create an AD Publisher. The problem is: When I configure...

Hi Tomas, Thank you very much, you're correct. Just wondering, DS certificate mean Document Signing certificate. Am I right? If yes, then it sounds normal to check to this check-box

Hi there there is an option for responseType by using ejbcaws.certificateRequest method. Use PKCS7WITHCHAIN to get the full certificate chain that include certificate of Root and Intermediate CAs

try this: try (ByteArrayOutputStream outputStream = new ByteArrayOutputStream()) { outputStream.write(BEGIN_CERTIFICATE.getBytes()); outputStream.write(certData); outputStream.write(END_CERTIFICATE.getBytes()); return outputStream.toByteArray(); } Replacing BEGIN_CERTIFICATE by BEGIN PKCS7 instead