Hi

My company has an Enterprise Root CA in Colorado and many Subordinate CA in
its offices around the world.

One of these offices having a Subordinate CA with the Enterprise CA in
Colorado wants to use a certificate issued for this CA for a communication
encrypted by SSL between an external OWA client and the external interface o
f
the ISA server. This office was able to set up a certificate on the OWA
website from its Subordinate CA and the internall users are able to access
OWA using https protocol.
For the extenal access, this office wanted to export this certificate and PK
and then to import it into the ISA server certificate store, but they were
not able to export the private key.
My question is: Is possible use this Subordinate CA in order to get the
certificate for the external OWA access? if so, what should they do in order
to get the private key?
If not, should I install a new Enterprise root CA on the domain of this
office?
If I install this new Enterprise root CA on this office ... could this new
Enterprise root CA cause some conflict with current Subordinate CA?

Thank you for any thought about it

Sean

[ Post a follow-up to this message ]