How can We Integrate Time Stamp Authority with Microsoft Active Directory Certification Authority

Question

I am seeking information on integrating a Time Stamp Authority (TSA) with an Active Directory Certificate Services (AD CS) infrastructure running on Windows Server 2022.

Specifically, I would like to know:

Is there a built-in option within the Windows Server 2022 roles to install and configure a TSA component?
If not, what are the recommended alternative options for integrating a TSA with AD CS in this environment?

I am interested in understanding the available methods for obtaining time stamps for issued certificates, including any potential third-party TSA solutions or alternative approaches.

Answer

Hello,

Thank you for posting in Q&A forum.

Unfortunately, there is no built-in option in Windows Server 2022 or AD CS to directly install and configure the TSA component. AD CS itself does not come with the Timestamp Authority role.

To integrate a TSA with AD CS, you will need to use external TSA solutions. Here are a few commonly used third-party TSAs:

GlobalSign TSA: Provides trusted timestamps and integrates well with various PKI environments.

DigiCert TSA: Offers timestamping services that can be used with AD CS.

Entrust TSA: Another reliable option for obtaining trusted timestamps.

These third-party TSAs typically provide APIs or software that can be configured to work with your existing AD CS infrastructure.

I hope the information above is helpful.

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Share via

How can We Integrate Time Stamp Authority with Microsoft Active Directory Certification Authority

1 answer

Your answer