I am running a service that should be available for external users as well as internal users.
External users must trust my Certificate Authority in order to use the service I am running and of course this brings on many horrible issues that relate to the system time on my servers.
I am looking for a way to enable external users to sync their system time with my Windows 2003 server.
If this is not possible, then I will need to look for a way to make the certificates issued by my server AND the CA server itself, more forgiving – time wise. As far as I know a discrepancy of more than 5 minutes means the certificate is useless… is there any way to change that?