【求助】windows2000 problem

[mok2000]

57. You are the . Create a policy on the CA that allows the
Web developers to request a certificate for code signing.
c. Install an Enterprise CA on one of your domain controllers. Install an
Enterprise Subordinate CA on one of your member servers. Issue code
signing certificates to your Web developers.
d. Configure your Web server to request code signing certificates from a
commercial CA such as Verisign.

Answer:d administrator of a Web server (IIS) that runs on a Windows
2000 Server computer. Your company web site has ActiveX controls. You want
these ActiveX controls to be automatically download to your customers
browsers. The default security settings on your customers' browsers
prevents this.

What should you do to automate the downloading of your ActiveX controls?

a. Install an Enterprise CA on one of your domain controllers and have it
issue a certificate for code signing.
b. Install an Enterprise Subordinate Certificate Authority (CA) that uses
a commercial CA as the parent
Original 900-->b

請問各位前輩這條如果在windows2000server應該如何設定???

[milwater]

呃.. 你的文章內容不清不楚的, 實在是有點看不瞭.
不過問題倒也明顯, 就是CA(存取憑證授權).
在安裝Win2k Server時要安裝該選項, 之後進到mmc, 做些相關設定.
由於設定手續多, 建議你買本專講"網路安全"的Windows2K Server的書來參考,
或是查查自己Win2k的說明檔內的 => mk:@MSITStore:C:\WINNT\Help\CSconcepts.chm::/sag_CS_procs_admin.htm