Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
0answers
3 views

SHA1 Migration to SHA2 - ADCS Windows 2012 R2

I am a little new to AD CS and I was tasked with upgrading our entire PKI infrastructure from SHA1 to SHA256 for the SHA1 deprecation. I have read somewhere that SHA256 can read SHA1 hashes. This ...
0
votes
0answers
13 views

Using OpenSSL Certificate with Windows Firewall Connection Security

I'm attempting to set up an IPSec transport mode connection between Windows 7 machines, using Windows Firewall Connection Security, authenticating using certificates. I can get it to work correctly by ...
0
votes
1answer
20 views

openvpn certificate error prevents from connection

I try to connect with Tunnelblick to my private VPN, but I get the following error message. 2016-05-24 12:18:07 VERIFY ERROR: depth=1, error=unable to get issuer certificate: C=IL, O=StartCom Ltd., ...
0
votes
1answer
39 views

how do I covert a certificate with extension .cer to .asc

I have a certificate file (with extension .cer) that has content which looks something like this. -----BEGIN CERTIFICATE----- lots of data here -----END CERTIFICATE----- It is our signing ...
0
votes
0answers
45 views

Domain is issuing trust certificate instead of root authority

I was running into an issue on Windows Server 2012 R2 where any website I visited was throwing a untrusted certificate error. I circumvented this issue by copying the certifications from another ...
-1
votes
0answers
11 views

SIM card used with Smartcard user certificate [on hold]

Is it possible to put Smartcard user certificate (windows) on SIM card?(SIM card allready has telecom info on it) I'm using win 2012 and have tried but getting this error "smart card cannot perform ...
1
vote
0answers
11 views

sbs 2011 certificate not renewing properly

I'm working on an SBS 2011 server here, the client advised she could no longer access mail on her laptop because her certificate had expired. The company uses a self assigned certificate. So I run the ...
2
votes
1answer
20 views

Finding Certificate Template in Certificate Authority

I'm following this tutorial: https://technet.microsoft.com/en-us/library/dn781428(v=ws.11).aspx I am on this step: Click to select the Certificate Templates container (under the CA name, not the ...
0
votes
1answer
27 views

Exchange 2010/Outlook certificate errors

We are running Exchange 2010 on SBS 2011. About a year ago, I renewed the certificate for the mail server, however, ever since that time, we receive certificate errors on OWA, and internally, we ...
0
votes
0answers
21 views

C# Web API is called by CICS cobol over https and it returns 403.16 error

A C# Web API is called by CICS cobol over https and it returns 403.16 error. The mainframe is the HTTP Client. This works with http but not https. A 403 forbidden access error occurs on the Web ...
1
vote
1answer
57 views

PKI EJBCA : extract CA from EJBCA instance and just keep sub-CA

I'm looking for a solution to extract the CA from EJBCA instance, put it on an external drive, which is secured in a safe-deposit for instance. So I only keep the sub-ca for signing the end user ...
0
votes
0answers
19 views

Self signed Cisco VPN Certificate

So I just rented some servers protected with a Cisco Firewall from a data center provider. I plan on accessing these servers through VPN. The instructions from the data center provider was to ...
0
votes
0answers
16 views

Windows: Verifying intermediate CA on dark network with keystore (.kdb)

Background: We have Windows Server 2012's (Server A and B) whose Internet Explorer (IE) connects to RHEL's Apache server (IBM HTTP Server). PKI: Apache serves a certificate whose intermediate CA was ...
2
votes
1answer
49 views

HTTPS not working with two intermediate certificates

Iʼm trying to create my own certificate authority using the XCA software. I have successfully created the root CA (Fisir Technologies CA) and intermediate CA (Fisir Technologies Intermediate CA X1). ...
1
vote
2answers
46 views

Better way to view windows certs than MMC?

I'm trying to view the windows certs on my box but the UI for certmgr and MMC is terrible. Specifically, I'd like a quick way to view and compare thumbprints and friendly names. Does anyone know a ...
0
votes
0answers
56 views

Mac Code Signing Certificate - Can't Renew

Got an alert on server that the certificate is going to expire. I click the "renew" button and it says Unknown Error. So I dig deeper and run the following on the command line sudo ...
0
votes
0answers
18 views

Installing Certificate Enrollment Web Service and Certificate Enrollment Policy Web Service on same computer

I am referencing this MS Technet document: Setting Up Certificate Enrollment Web Services The environment is Windows Server 2008 R2. I am planning for a Certificate Enrollment Web Service and the ...
0
votes
1answer
75 views

Exchange 2013 ECP ,Redirect loop with wildcard cert

Recently we were unable to log into ECP, after successful login we a re redirected to de login prompt, on our two Exchange servers and no configuration change were made, we are using a wildcart cert ...
1
vote
1answer
35 views

java keystore with multiple aliases on apache

A JKS file (Java key store), May contains many aliases, this means it may hold many private+public keys combinations, some aliases may be trusted, some not. When I define jetty to use SSL, as this ...
0
votes
1answer
14 views

Import Certificate to Machine\personal script/automation?

Is there a automated way to perform this task: I need to import a PFX certificate to computer / personal path on multiple IIS 7.5 servers (Windows Server 2008 R2). I already tried with GPO but there ...
0
votes
1answer
74 views

Authenticated Origin Pulls with CloudFlare and IIS

I'm running Windows Server 2012 R2 with CloudFlare in front and trying to setup authenticated origin pulls as specified here - https://support.cloudflare.com/hc/en-us/articles/204899617 The problem ...
2
votes
1answer
59 views

How to add nameRelativeToCRLIssuer To CRL using OpenSSL

I'm trying to create a certificate using OpenSSL with a nameRelativeToCRLIssuer attribute for the DistributionPoint URL, rather than a fullName attribute. I've been using the following extfile.cnf to ...
0
votes
0answers
12 views

PEAPv0 Used in Windows Server 2012?

I've read the Wikipedia article on PEAP and have searched Microsoft.com. By all indications, Windows (in my case, Server 2012), uses PEAPv0 (as opposed to PEAPv1 or PEAPv2) to wrap MSCHAPv2. Is ...
0
votes
2answers
66 views

LDAPS on Windows Server 2012 R2 without CA

I am building Splunk in a production environment. The long and short is, in order to get relevant AD things that I need from my Domain Controllers, which are running Windows Server 2012 R2, I need to ...
1
vote
1answer
58 views

Mutual SSL authentication - client certificate vs server certificate

I am setting up a web application which will connect to a remote web service and is required to use a client certificate. My web app uses HTTPS to connect and I have it configured with my existing ...
0
votes
1answer
36 views

nginx client certificate location block

How can I use client certificate authentication with nginx for a folder? The ssl_client_certificate directive isn't allowed in location blocks. Example: I want my website me.tld to be reachable by all ...
0
votes
1answer
96 views

Client certificate causes http 500.0.64 error in IIS

I have installed a client certificate on my client server. When making an HTTPS request from the client to target server with the client cert the IIS logs report a 500.0.64 error occurred (this is the ...
1
vote
1answer
316 views

List all available templates from CA certutil or certreq

I need to request a certificate via command line I have investigated that certreq is the tool that can request the certificate. I am used to the gui to request the certificate by selecting one of the ...
2
votes
1answer
59 views

What is a safe way to allow any windows user to encrypt a file but only a specific application decrypt it

I've developed a service that reads text files from a location. Some of the text files may contain sensitive information. We would like to allow any user to run a standalone tool to encrypt the ...
0
votes
0answers
136 views

Get the latest CTL or list of trusted root certificates

I need to implement a service that does not start because the certificate cannot be validated. This certificate have a root ca that was recently created, so my windows 7 machines does not trust in ...
1
vote
2answers
44 views

TinyCA generated cert refused by Exchange 2013

I've created a CA using TinyCA2, and have created a certificate for my Exchange 2013 server. Although the certificate installed fine on exchange, Exchange always says "Revocation Check Failed". ...
0
votes
2answers
66 views

ADFS and relying party web form

We are in the process of configuring our ADFS server to allow SMAL authentication from a third party web application. We are slightly confused as listed below: We received metadata file and ...
0
votes
0answers
37 views

How to disable Microsoft CA version extension in a Standalone Root CA?

I was looking for a way to exclude CA version from the ca extensions, but found nothing. We use Windows Server 2012 and it is needed for a Standalone root ca. Is there any way?
0
votes
1answer
101 views

Microsoft Active Directory Certificate Services Response from certsrv

I am trying to use certificates and private keys on embedded systems that were generated from Microsoft Active Directory Certificate Services . NDES and SCEP are currently out of scope so it will need ...
0
votes
0answers
24 views

dogtag CRL profile

I am attempting to add a CRL Distribution Point to a Dogtag CA Certificate Profile. Using the caServerCert profile as a template, I copied it to a profile named serverCertTest and added the following ...
0
votes
1answer
33 views

RDS Session Host RDP SSL Certificate Expiring

We have RDS Deployed with: RD Connection Broker RD Session Host RD Licensing RD Gateway RD Web Access .. For your information our Gateway server name is rdp.sparkorg.org To renew the RDS ...
0
votes
2answers
110 views

Have both Hostname and FQDN in SSL Certificate on IIS

I've been searching here, technet and google but haven't been able to find an answer to my question yet. I have a website running on IIS 7, Server 2012 R2. The IIS serves as an access to our Citrix ...
1
vote
1answer
39 views

ActiveDirectory LDAPS third-party certificate and internal names

I have an AD RODC running on Server 2012 R2 Core in my perimeter network. I am using this for external/hosted applications that can do LDAPS based auth. My problem is that the FQDN of the server is ...
0
votes
1answer
92 views

No Certificates Found on Chrome Android with Comodo Positive SSL and IIS

For software testing reason, I have registered a domain name, set its A record to point to 192.168.1.30 (local PC on my network). I have installed Comodo Positive SSL for this domain on IIS on Windows ...
1
vote
1answer
27 views

Certificate status still pending even after completion

I have exchange 2013 on Azure VM which is also a DC. for using services like autodiscover etc I need to get a valid 3rd Party certificate which I got from STARTSSL, I generated the request and got the ...
1
vote
0answers
38 views

Cisco vWLC sha2 certificates not supported bug?

I currently have an app running with a Cisco virtual Wireless Lan Controller, all works fine except we get some error messages regarding SHA1 certificates, when I'm looking for SHA2 support the cisco ...
32
votes
3answers
2k views

Why are many admins using 'Turn off Automatic Root Certificates Update' Policy?

My company distributes a Windows Installer for a Server based product. As per best practices it is signed using a certificate. In line with Microsoft's advice we use a GlobalSign code signing ...
0
votes
0answers
48 views

How to use keystores and trust stores in linux & nginx

I am a newbie to implementing some of these concepts.I have a few questions to ask. I have read about keystores and trust stores using various links. The one that makes sense is this ...
0
votes
1answer
26 views

How do I determine if strong key protection is enabled for a certificate private key in Server 2008 R2?

I'm trying to get a Windows Server 2008 R2 domain controller to use SSL with LDAP. I have a certificate installed, but I'm unable to connect on port 636 via ldp.exe (port 389 works just fine). I ...
0
votes
0answers
6 views

Is there anyway to parse an OBJECT type from a certificate with opeanssl asn1parse?

let's see this sample code: $ openssl asn1parse -in mysterious_file.pem ... 78:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName 83:d=5 hl=2 l= 8 prim: PRINTABLESTRING ...
0
votes
1answer
26 views

Add additional information to auto-enrolled certificates (Windows Active Directory CA)

I successfully enabled auto-enrollment for client computer certificates within our Active Directory domain. However, I want to include additional details in the auto-enrolled certificate such as the ...
2
votes
1answer
33 views

HP ilo Bulk Certificate update

I have a mixture of iLo 1-4 to update the self signed certs to use our CA. I have found some tools for the version 3/4 through PS and the new HP cmdlets. So two questions. Anyone know a way to bulk ...
4
votes
1answer
68 views

how to configure sendmail with multiple ssl certificates for multiple domains

I need to configure a server to host multiple email domains on a single IP, and thus install multiple ssl certificates. Miraculously, I have been able to get apache and dovecot to work with multiple ...
2
votes
1answer
85 views

Can I use a Comodo Wildcard-Subdomain Cert for RDP on Win10?

I followed Using CA certificate for Remote Desktop Connection Configure custom SSL certificate for RDP on Windows Server 2012 in Remote Administration mode? to secure RDP with a proper cert ...
0
votes
1answer
80 views

determine assosicate service installed certficate on windows server 2003 or which service is using that certficate

I have been facing issue to determine the purpose of installed certificate on windows server. Further, Is there any way to determine which service is using any particular certificate. So that before ...