http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com: 80/support/kb/articles/Q228/8/21.ASP <http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com :80/support/kb/articles/Q228/8/21.ASP&NoWebContent=1> &NoWebContent=1 & http://support.microsoft.com/default.aspx?scid=kb;EN-US;228836 <http://support.microsoft.com/default.aspx?scid=kb;EN-US;228836> should explain that process in detail. You only need one issuing CA somewhere in your organization. There are reasons you wouldn't normally want it on your DC, but that's another topic. Al _____ From: ts.sid [mailto:ts.sid@xxxxxxxxxxxx] Sent: Thursday, May 06, 2004 12:10 AM To: [ExchangeList] Subject: [exchangelist] Certificate service http://www.MSExchange.org/ Dear All, I configured my domain controller as certificate server and install exchange server 2003 in member server. Want to enable SSL for OWA & S/MIME for (Encryption & Digital Signature) to do this I want to use my root certificate service (domain Controller) without installing certificate service in exchanger server (member server). Please explain me how to d this. Best regards, Malinda Perera. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------