Tag Archives: ca

Enterprise Root CA can’t issue more than 2-year certificate

If you want to issue a certificate with 20 years expiration, run this commands:

certutil -setreg ca\ValidityPeriodUnits 20

certutil -setreg ca\ValidityPeriod "Years"

net stop certsvc

net start certsvc

 

To issues a certificate with a template, run this command

certreq -submit -attrib "CertificateTemplate:CertificateTemplateName" CSRfile.csr

 

 

Arcserve R12 and Exchange

If you have follow my guide howto to backup exchange from Arcserve R12, but still have problems with backup the exchange server.
Try to search in global address book, in outlook if you can find the user this way, if you can’t that the problems.
In our setup we got this problem on our Hosted Exchange server, the problems was resolve with adding a user and putting it in our own global address book.

Arcserve Exchange R12 Setup (Brightstor)

Many of my hits come from search engine, and Exchange and Arcserve R12 setup, is one of the most common. So here come a little howto to setup Exchange R12, with Exchange.

Database Backup

To backup the Database, you can use the normal backup user. (Its recommended to use a administrative account).

Document Level Backup

With CA Arcserve R12 (Brightstor), premium add-on to Exchange is ended, so now there is only one agent for Exchange.
To perform a Document Level backup and restore job, the backup agent service account must meet the following criteria on the Exchange Server:
1. Account must be a domain account.
2. There must be a mailbox on the Exchange Server to which you plan to back up or restore to. This mailbox must be operational, initialized, and must have the same name as the backup agent service account.
3. Mailbox must not be hidden.
4. The first three characters of the mailbox name should be unique.
5. Account must be a member of the Administrator’s group.
6. Account must be a member of the Backup Operator’s group.
7. Account must be assigned the Exchange Full Administrator Role (Exchange 2000 and Exchange 2003 only).
8. Account must be assigned the Exchange Organization Administrator Role (Exchange 2007 only).
9. Account must be assigned the Exchange Server MAPI Owner role on every public folder intend to Backup and restore because permissions for public folders can vary. If lower permission level is assigned, back up or restore may fail or duplicate items may be restored because the backup agent service account does not have the permission to delete original documents. The method that you use to assign Exchange Server MAPI Owner role varies depending on the version of Exchange in your environment:

Exchange 2000 and Exchange 2003
To assign this role, open the Exchange System Manager, right-click the public folder you want to back up or restore, and select Properties. When the Properties dialog opens, click the Permissions tab, click the Client permissions button, either add a new client with the Owner role or modify an existing client to assign the Owner role, and then click OK.

Exchange 2007
To assign this role, use the Exchange Management Shell command add – Publicfolderclientpermission to grant the user Owner access rights.

[ad]

Arcserve (Brightstor) Linux behind Windows Arcserve R12

We have upgraded a Arcserve (Brightstor) R11.5 to version R12. But behind this one there was install some R11.1 Linux agents. We have been told by CA Support that R12 support R11.1 linux clients. That can maybe be true, but not in our setup. We need to upgraded the R11.1 to R11.5. There is not yet a R12 Agent to Linux out there.

R11.5 can be download from CA Trials page: http://www.ca.com/trials, but remember that you need a R11.5 license.

[ad]

XO Soft Wansync seminar…

Har været på en dags seminar omkring XOSoft, et fantatisk program. Kan replikere Exchange til en anden server, det i sig selv er ikke det store, men det der er spændende er er deres Wansync HA, hvor den kan skifte rundt fuldstændig automatisk hvis der opstår et problem på den ene server. Det bliver et spændende produkt.