Wednesday, January 30, 2013

PKI OID

As part of my requirement for implementing Windows 2012 Public Key Infrastructure, I needed to get hold of an OID number that's unique to my organization.  However, the Microsoft's documentations on obtaining an OID was confusing at best.  It took me a quiet a while to determine where and how to obtain an unique OID without any cost.

First, browse to http://pen.iana.org/pen/PenApplication.page, and register for a Private Enterprise Number (PEN) for your organization.  This is a free service, and takes only few days.  At the end you'll receive unique number that will be listed on http://www.iana.org/assignments/enterprise-numbers.

Finally, to complete your OID, you just need to append to the following prefix:


Prefix: iso.org.dod.internet.private.enterprise (1.3.6.1.4.1)



So, if you have PEN as 12345, then your OID will be 1.3.6.1.4.1.12345.

You can now add the OID into the CAPolicy.inf, and continue with the implementation.