STD Server 2003R2 / 2008R2 (NON SBS Domains)
Hello,
1) In general i wanted to know if Certificate Auto Enrollment is a good idea. I have seen this at some customer sites and never used it.
I guess in general the source for this options wa in Mobile Certificates which they don't want to re-issue each year as example.
From my point of view this clearly decreases security since you skip a manual process.
2) I have also seen in some Microsoft Certificates Migration Blogs and Videos that they change the Revocation time from x-months to like 6 months.
Are those two points metioned somewhere in White papers from MS or all people doing it like this?
Can anybody state shortly on this two issues?
Thank you for any help.