I've been looking to the built-in Managed Information Card issuance web site that is installed with Geneva Server (beta 2) and I've been wondering if it is possible to move that web site to another place and still access the Geneva Server for that issuance.
In that issuance web site, the card provisioning service is configured to "net.tcp://127.0.0.1/provisioning/LocalWindows", can it be accessed from another place than local ?
I mean, in a production environment I wouldn't want to put an access to my AD DS Server even with a secured card issuance web site, so I'd try only to move it to another place, like a web server with special access to it, and/or to be able to configure some alternate Attribute Stores in Geneva Server and to be able to produce Managed Information Card for those attribute stores for some authorized people.

Is there a way to do this ? and where would it be described ?

Hi Guillaume,

Geneva Server does not support moving the card issuance website to a separate machine.The card provisioning service endpoint is not configurable and can only be accessed locally.

Is there a reason why you'd like to move those pages onto another machine?

Thanks,
-Aurash

The first reason is I wouldn't want to expose the server with AD DS directly on Internet, or on a VPN (even though it is a bit more secured).
So, to move it on a server that is exposed with less risk was my first thought, but maybe there's another way to provide managed information cards to some people that are not in the same domain as Geneva Server (beta 2) ?