Adding a Subject Alternative Name Field to an Existing Certificate - TechRepublic
Question
November 6, 2012 at 11:07 AM
s31064

Adding a Subject Alternative Name Field to an Existing Certificate

by s31064 . Updated 13 years, 7 months ago

We’re using a Windows Server 2003 CA to provide certs for our VPN users, and it’s been working well. The decision was just made to allow our iPad and iPhone users access to the VPN, however this apparently requires an additional Subject Alternative Names field to be added to the server’s cert. This doesn’t appear to be too hard (certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2). My question is, will adding this field affect any of the other systems that are already using the VPN? I don’t think it should, but I need to be sure before we make any changes to the existing infrastructure.

From the Apple iPhone OS Enterprise Deployment Guide:

“The server identity certificate must contain the server

This discussion is locked

All Comments