As illustrated by the following figure , CA Gateway manages each Microsoft CA instance through an Entrust Proxy for Microsoft CA.
In this architecture, CA Gateway is a client of Microsoft CA. See in the following sections how to configure the Entrust Proxy for Microsoft CA and CA Gateway to manage Microsoft CAs.
- Adding Microsoft Management Console snap-ins
- Enabling supply in the request
- Configuring Request Handling in the Microsoft CA
- Enabling SAN attributes in the enrollment request
- Installing the Entrust Proxy for Microsoft CA
- Creating RA agents
- Issuing the SSL certificates
- Generating a client keystore for Entrust Proxy for Microsoft CA
- Generating a truststore for CA Gateway
- Generating the server keystore of the Entrust Proxy for Microsoft CA
- Running the Entrust Proxy for Microsoft CA
See Microsoft CA capabilities for a complete description of the operations supported by these CAs.
Only Microsoft Enterprise CA is supported; standalone CA is not supported.