This is definitely an Entrust product question.  Usually, you will not
see the certificate extensions when you're approving a CSR (unless the
PKI builders chose to make it visible to you).  Configuring the CA to
tweak the key-usage bits requires going into some configuration mode
(perhaps through an administrative interface/console) and then setting
the appropriate bits for key-usages for specific certificate types.

Arshad Noor
StrongAuth, Inc.

Nelson B wrote:
Vivek Kumar wrote:


Could anyone please tell me how to change the extension of the server
cert to include "Key encipherment" for KeyUsage? When creating the
server cert I did not see any options to modify the attribute..
We have setup the CA using Entrust and uisng IIS 6.0 as the web-server,..
Please help, very new to CA/ SSL security,..


Your question is how to set up an SSL server with an Entrust CA product
or service.  That's really a question about the product or service,
more than a question about certificates.

I don't know if anyone on this list has any Entrust CA experience, or not.
But this seems like a question that an Entrust customer would ask of
Entrust's tech support.

_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to