What is the CA server made?

Hello:

I have a hub and network speaks with PKI security database.  My question is, in normal operation, after after issued summer and spoke at its routers associations implemented, are there more all communications with the CA server? Assuming routers hub-and-spoke is communicate constantly it is necessary for the CA server? Even is the communication between a hub, router a router spoke must be renewed, is the CA server involved? As long as the certificates never expire, the CA server mean?

Thank you

Mickey

In general, the certification authority is necessary only when a new certificate must be issued. The normal IPSec-tunnel-configuration didn't need the CA at all.

But: When the tunnel - the installation is done, the hub (or same hub and rays) can be configured to compare the serial number of the certificate that is presented in a list of revoked certificates (CRL, Certificate Revocation List). Although not a best practice, this list is usually served by the certification authority. If your public key infrastructure is configured this way, then the certification authority must be online all the time. If best practices were followed during the implementation of the CA, the CRL is published on a different server and the CA must be online when the new certificates are issued, or a new CRL is published. Here, the server that hosts the Revocation list must be online all the time.

A similar concept, instead of a Revocation list, you could use the Protolol OCSP (Online Certificate) status, but here's the same thing, instead of run this service on the CA, it is preferable to use a different system for this.

--
Don't stop once you have upgraded your network! Improve the world by lending money to low-income workers:
http://www.Kiva.org/invitedBy/karsteni

Tags: Cisco Security

Similar Questions

  • What is the web server integrated for Windows XP Professional?

    Hello

    I would like to know what the web server integrated for Windows XP Professional.

    I don't know of a free web server like Apache or IIS.

    I want to host my site on the net using the web server integrated in XP (not IIS).

    Thanks in advance.

    It is not just any server web, other than IIS, integrated with Windows XP Professional.

    You think perhaps of Personal Web Server (PWS) which was part of the old operating systems like Windows NT.  Which no longer exists in Windows XP Professional - it has been replaced by IIS.

    -B-
    http://www.officeforlawyers.com | http://www.OneNote-tips.com
    Author: Guide to counsel for Microsoft Outlook

  • What is the tone server scenario in exchange 2003 server

    What is your server Dáil in exchange 2003

    Hello

    The question you have posted is related to Exchange Server 2003 and would be better suited to the TechNet community. Please visit the link below to find a community that will provide the best support.

    http://social.technet.Microsoft.com/forums/en-us/exchangesvravailabilityandisasterrecovery/threads

    Amrita M

    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • What is the Web server in OBIEE 10.1.3.4.1

    Hello guys

    Asked, in an interview, that what web server I use now... Can someone let me know what web server in OBIEE... Can I be I worked in it and I could not is able to recognize it as a web server exactly.

    I am currently working on the Stand Alone BI environment. Your help is highly appreciated

    I try to install OBIEE 10.1.3.4.1 on Linux OS. Can I know the compatible version of oracle application server (web server) for OBIEE 10.1.3.4.1 and thanks to give the link or the detail to download and install the Linux operating system

    Published by: user10196910 on August 18, 2010 10:57

  • URL redirects can be configured with XE, and what is the HTTP Server

    I wish I could the URL redirects. I'm under XE with Application Express 2.1.0.00.39.

    I want to be able to have a URL like www.schoolwebsite.com and when the user presses on it - have redirect to the page of the Apex for the application. I thought I had to use a redirect in the configuration file HTTP and that XE used Oracle_HTTP and I have set up this way.

    But I can't find an Apache Directory.

    1. what HTTP server is used with XE and Application Express 2.1.0.00.39?
    2. can I set up for this type of redirection?
    3. do I need to install a HTTP server for this?

    Thank you
    Stephen

    If you want to achieve without a separate http server, follow this discussion:
    Re: Default Page

    Kind regards
    ~ Dietmar.

  • What is the best server of the website to join?

    Hello I must be just tried a lot of server with me find in fairness, all were poor except hostpapa service was good but just for basic Web sites, I went to try one.com service when I used was great to be fair but then they turned very little helpful and stopped me using the site but no fault of my own so I'm really eager to find a good server , I can use so all suggestions?

    A C-Panel is very useful for:

    • Restart your server when it breaks down,
    • creation & management of password protected files,
    • creation & management of email accounts,
    • activate other features & services that come with your hosting plan.

    IMO, it is worth the extra price.

    PHP is a programming language server to run scripts.  An example would be a script of contact form that deals firmly form data and sends it to your e-mail address.

    MySQL is a database server to store the contents of the database of web sites that contain blogs, forums, e-commerce and content such as WordPress management systems...

    Windows servers generally do not support PHP & MySQL unless pay you extra.

    Linux/Apache servers regularly come with PHP & MySQL.  And they are often cheaper than Windows hosting plans.

    Nancy O.

  • What is THE IMAP SERVER DIRECTORY?

    Please, I beg you! TBIRD is great, but it's difficult to understand many things.
    In your next version please bring back the old context help where I could drag HELP? arrow to (on) some have and would get a simple explanatory note.

    http://KB.mozillazine.org/IMAP:_advanced_account_configuration

  • The latest changes to the 'Upload to the FTP host' function has made it useless - no point using a program such as Muse if I can't easily and automatically upload work to the Web server.

    The latest changes to the "Upload to Host FTP" function made it useless - no point using a program such as Muse if I can't easily and automatically upload work to the Web server.  I use BlueHost webhosting with a main area and I have several domains with this account (such as subdomains or folders on this server) - with older versions of Muse when downloading pages it simply opened a warning window to tell me (what I already know) the Web site I am downloading does not point to the main domain BUT now Muse is trying to create a new folder separated into the root directory of the main domain. completely ignoring the directory path that I am giving him - useless!  Why do these crazy changes to the program - and so often - it is very frustrating as amateur ware!

    Hello Stephen,

    There are some problems with the download of ftp through Muse, who knows the team of engineers and those will be corrected in a future version of Muse. At this point, the work around would be to export the html code of Muse and then download via some third party client like filezilla ftp.

    I would recommend that you keep an eye on our page of release notes to get updates more about it - Release notes | Adobe Muse CC

    - Abhishek Maurya

  • What would cause the "from address" info (FA). some emails, downloading the pop3 server, will be replaced by an 'f' 'common '?

    I get multiple research work emails (E/JS) and ecommerce. Some of them have a "Correct".
    'St. Michael Job Assistance Ministry - JAM' FA (SMJAM-JAM).

    For some reason, however, some of the emails from other sources, downloading the verizon pop3, E/JS server are indicated (wrongly) as having the FA SMJAM-JAM above. This situation prevents my email filters to plug these emails to their appropriate mail folder.

    Also, when the steps in order to transmit emails showing incorrect information of FA SMJAM-JAM, the e-mail is no longer present incorrect information of FA SMJAM-JAM but shows rather the correct information of FA that had been specified on the verizon pop3 server.

    address ROM"(FA) in some emails, when downloading from the pop3 server, is replaced by a 'common' 'FA '. [email protected]

    What would cause the "from address" info (FA). some emails, downloading the pop3 server, will be replaced by an 'f' 'common '?

    Hello

    If I understand your problem, I think it may have to do with the addresses stored in your address book. Thunderbird can display the name of your address book instead of the name of the post office, where corresponds to the e-mail address.

    Check your address books to see if you have a bad entry for mail addresses get listed wrong.

    Also check under Tools-> Options-> advanced-> reading & display if you have checked the option to see show it only the names of the people in my address book. If you uncheck this option, the name and the address must be...

  • What is the MacintoshHD/library/server/ServerDocs/Data folder used for?

    I use the latest version of the server software OS X on a Mac Mini with a 256 GB SSD.  I keep running out of space. The MacintoshHD/library/server/ServerDocs/Data folder seems to be where the files are placed which occupy all the storage space.  This single file is close to 140 GB. He seems to have a copy of all my files into it.

    What is the folder?

    Can I move it to an external hard drive, if yes how?

    Do I have to have the folder for the server software to work?

    This is a (known) bug in the server application. The workaround, assuming that you have no need of smb shares, is to disable smb on the file share points that you enabled.

    If you have need of smb shares, I'm afraid you can be out of luck. You can remove the data, but it will (probably) come back... He did it for me.

  • What that means, "Web service is disabled. An administrator can activate using the application server? »

    I am trying to connect to a Web site that I am using for 5 years and more. Now Firefox reports that the certificate is incorrect, and the message "Web service is disabled. An administrator can activate with the server application. ", is given.

    I don't know what to do with this information. Service Web is on other Web sites. What is the "server application? How to take control and connect? I am the administrator.

    Are you able to reproduce this problem with another browser?

  • Cannot open a pdf Pages, I made by those who that I sent. Another file is a pdf from Adobe that they handled without problem. What is the problem?

    Cannot open a pdf Pages, I made by those who that I sent. Another file is a pdf from Adobe that they handled without problem.

    What is the problem?

    The pdf of the Pages is limited to Mac users?

    You export a Pages document in PDF format, or you choose File menu: print... and choose the PDF button and then save as PDF... Fix?

    And now, others say that they cannot open this PDF on Mac? On PC? On Linux? Using this PDF reader?

  • I tried everything, but I get "SERVER NOT FOUND TRY AGAIN" when I try again his connects. What is the prayer of the problem. N ".

    I tried everything but keep getting "SERVER NOT FOUND TRY AGAIN" when I try again once it normally connects. What is the problem please

    This can have several reasons:

    first make sure that your firewall/security software allows firefox to fully access the internet.

    then you can try the solutions (proxy settings, the change of dns server) provided in this support thread: https://support.mozilla.org/de/questi.../704934

    If this does not help, also try disabling ipv6 as described here: https://support.mozilla.org/en-US/kb/Server%20not%20found?s=server%20not%...

  • What is the difference between Ubuntu desktop edition and server edition?

    What is the difference between ubuntu desktop edition and server edition?

    Desktop Gets the window manager and terminal server :)

  • What is the name of the e-mail server on iCLOUD?

    What is the name of the e-mail server on iCLOUD?

    It was some time ago: p26 - imap.mail.me.com and outgoing e-mail p26 - smtp.mail.me.com

    but now I'm not sure about this, because I have problems to connect with the iCLOUD account in Outlook.

    Mail server information

Maybe you are looking for