Question

I need to submit a PKCS#10 certificate request to a certificate authority who is outside my domain. This article in MSDN shows a way to submit certificate requests within a network using ICertRequest2 COM object.

hr = CertRequest->Submit( CR_IN_ENCODEANY | CR_IN_FORMATANY, RequestStr,
                          AttributesStr, CAName, &Disp );

where

BSTR CAName = SysAllocString( L"COMPUTERNAME\\CA Name" );

My question is how do i submit my request progrmatically from the client who is outside the Domain.

I don’t want to use the Microsoft web enrollment pages, as this needs to be a automated process.

My CA is 2003 Enterprise and client is XP SP3.

Any ideas please?

Thanks

Answer 1

In general, this can be done in few ways

1. Manually with some audit procedures between the CA and the participating entity/user

2. Semi automatically using the MS windows provided web URL/enrolment page, certsrv

3. Write your own solution, say, a web service to liaise between user and the CA