Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

1
vote
1answer
15 views

No service for subscription

I am trying to set up bursting to Azure with a Windows HPC cluster. THe cluster already works fine and I can start jobs on the machines on that are on the local network. When I try and create a node ...
0
votes
0answers
11 views

error Unable to configure verify locations for client authentication

Starting my apache2 Server on Ubuntu 12.04.5 LTS, I got the following error [error] Unable to configure verify locations for client authentication my Problem, on the server are more than one ...
-4
votes
0answers
53 views

Root certificate [closed]

My question is related to a root certificate issued by a Country signing certification authority (CSCA). Is it possible to send that certificate to a public Key directory, if there are two different ...
1
vote
0answers
48 views

RDWeb TS connection broken for some users post RemoteApp certificate change

We recently reissued our GoDaddy wildcard cert with the SHA256 signing algorithm (FYI they still revoke the old cert in 72 hours even if you don't re-key it, so you should re-key anyway). We use this ...
0
votes
2answers
48 views

CAs in different child domains

I am trying to achieve the following; Environment is a Single Forest with a Root Domain and x2 child domains as follows; root.net child1.root.net child2.root.net There will be no logical or ...
-1
votes
2answers
47 views

Can one domain have 2 or more SSL certificates?

I have googled and found this post: http://security.stackexchange.com/questions/46988/is-it-technically-possible-to-configure-two-different-ssl-certificates-for-the-s If it actually is possible, then ...
0
votes
2answers
67 views

Server sent passive reply with unroutable address when connecting to FTP site with FileZilla

I get the error "Server sent passive reply with unroutable address. Using server address instead." when connecting to a FTP site (not SFTP). I have connected to this site many times, however ...
2
votes
2answers
102 views

Will DirectAccess clients renew workstation certificates off-site?

I setup MS DirectAccess nearly a year ago, which required configuring computer certificate auto-enrollment. The first computer certificate is going to expire in about a month, and now I'm wondering ...
2
votes
0answers
25 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
2
votes
0answers
29 views

How do I make a Cisco Ironport appliance send “linked certificates” for HTTPS inspection?

I have a PKI tree, and the ironport is a CA at the second level of the PKI tree, (for issuing HTTPS inspection certs) Although I deployed the root certificate to all clients, and chrome/IE work ...
4
votes
1answer
198 views

Puppet: New server unable to fetch configuration from puppet, with some ssl error, what could be the reason?

3 machines in the production environment had some HW issue and were decommissioned. The infrastructure team has re-installed them and gave them the same hostnames and IP addresses. On the ...
2
votes
1answer
37 views

How to Automatically Tust Auto Enrolled Code Signing Certificates

In my organization all developers are setup to be granted a Code signing certificate via Auto Enrollment. Additionally, PowerShell is configured by group policy to require all scripts to be signed. ...
7
votes
2answers
122 views

Enable Certificate Enrollment Policy and Request a Cert using PowerShell

Right now, I'm doing the following to request a cert from a CEP server: Open gpedit.msc Under Computer Configuration > Windows Settings > Security Settings > Public Key Policies, double click ...
12
votes
3answers
1k views

How do I keep the ssl key for our website confidential?

I want to keep our SSL key for our website confidential. It's stored on 2 USB sticks, one in a safe deposit box and one I keep secure. And then I'm the only one who applies it to the web server so ...
1
vote
0answers
35 views

VMs with same name an IP

Does Foreman support managing several VMs with same name and IPs, but with different certname? for example: NAME IP CertName VMLinux001 10.0.0.2 VMLinux001@domain.com ...
1
vote
0answers
41 views

Add trusted remote certificate to Ubuntu server

I'm running an app on an AWS server running Ubuntu 12.04.4 LTS. I'm writing a script to connect to an SFTP server from the command line, but am unable to connect. I believe this is because my Ubuntu ...
1
vote
1answer
20 views

EAP-TLS: is it possible eavesdropping when sharing client certificate?

I want to know how to share a network of WPA2 enterprise with EAP-TLS, authenticating users with a common certificate. They share the same certificate. I'm afraid they can monitor each other. Is ...
0
votes
1answer
33 views

How should a wildcard certificate be used?

I have a wildcard certificate (pfx file) and I have doubts on how to use that. Should I install that on all of my application servers or alternatively create a new certificate and sign it with the ...
3
votes
2answers
73 views

Exchange 2010 SP1 Certificate renewal, the new rule not allowing local intranet domains and will this change mail flow?

I'm in a pickle with the infamous "The Security certificate has Expired or is not yet valid" message and I know it is due to our (multi domain name certificate; or I think that is called a SAN cert? ...
15
votes
4answers
1k views

Where do companies typically store SSL certificates for future use?

We recently bought a wildcard SSL cert for our domain. We converted all of the certs to a Java keystore, but now we are asking ourselves where we should store these for later use. Do people use ...
2
votes
1answer
45 views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...
0
votes
1answer
50 views

Remove active directory certificate service role - Windows Server 2008 R2

I have the following setup First DC1 - with AD DS and AD certificate services. Second DC2 - with AD, recently dcpromoted. I've never used AD CS in domain environement. I need to reinstall DC1, ...
-2
votes
1answer
24 views

Can a certificate signing request generated from a certificate using openssl have extensions? [closed]

I am generating a self signed certificate at first. But someone wants to get it signed by another CA, I want to generate a certificate signing request from this existing certificate. Now what I want ...
1
vote
0answers
37 views

How to setup digital signatures on Microsoft CA (AD-CS)?

I've been trying to research across the web on how to setup a Microsoft CA (AD-CS on Windows Server 2008 R2) in order to create a certificate for digital signatures, allowing you to digitally sign ...
0
votes
1answer
114 views

OPENSSL Save x509 certificate of a website

I can see the certificate with this command openssl s_client -host {HOST} -port 443 -prexit -showcerts How can I save the x509 cert of the website in a PEM - File?
0
votes
0answers
17 views

Effects of changing from basic auth to cert based auth?

I have been doing a bit of research on how to solve some frustrations our users have with mobile email and it looks like changing the Exchange settings to allow cert-based auth will help. I have been ...
2
votes
2answers
189 views

How are Windows MachineKey Container File Name's Derived?

In the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys directory there's an enumeration of Key Containers. The naming convention is <uniqueGUID>_<staticGUID> and I presume the ...
2
votes
1answer
72 views

Prompt for Certificate Password When Accessing EFS Shares

My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
1
vote
1answer
120 views

New root CA will not list schema version 2 & 3 certificate templates

I'm trying to decommission a Server 2008 machine that hosts DC, NPS, and CA. I've deployed two new servers to take over as root CA and RADIUS server (both new servers are 2012R2). The new root CA is ...
0
votes
0answers
42 views

Apache Webserver: Map ClientCertificate to Active Directory

Using Apache Webserver 2.4 and mod_ssl and mod_authzn_ldap I'm trying to Authenticate the user by a ClientCertificate (PKI smartcard) Authorize the user by membership of certain Active Directory ...
1
vote
0answers
105 views

wdsutil claims Windows Server 2012 R2 drivers are unsigned, but they have a valid certificate

I'm trying to import some Windows Server 2012 R2 drivers to a driver group in WDS. My WDS server is running Windows Server 2012 (not R2). When I run the following command: WDSUTIL /Add-DriverPackage ...
1
vote
0answers
68 views

Remote Desktop Certificate Template Application Policy Extension

We are setting up remote desktop authentication with the use of certificates and ran into an issue in one of the environments. I am editing the RemoteDesktopComputer2008 certificate template, in ...
0
votes
2answers
64 views

What SSL certificate to use with web app with API on Azure?

I am creating a web service / app and hosting it on Azure. Users signing up for the service will get their own subdomain, e.g. user1.example.com. I have an API which is accessible through www. I want ...
0
votes
1answer
60 views

One Certificate to Rule them all [closed]

I'm looking to roll out Exchange 2013. We also have various web facing properties. We have an internal domain name of ourdomain.local and an external domain name of ourdomain.com. To keep things as ...
2
votes
1answer
117 views

Submit a certificate request file from a non domain computer. How to figure out policy server parameters

I'm trying to submit a certificate request. I'm trying to do it from command line so I can run it from code. Previously I have done it by using the Microsoft Active Directory Certificate Services for ...
1
vote
1answer
203 views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
3
votes
0answers
42 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
1
vote
1answer
102 views

How can I install a client certificate for all users of a computer?

I have a PFX file (.p12) that is needed to allow access a remote web page. Double-clicking on this file and following a few prompts easily adds the certificate to a personal store, but this only works ...
0
votes
0answers
230 views

HAProxy - ssl client ca chain cannot be verified

Situation: I want this to work: requests come from clients and goes to haproxy through 443 port (ssl) and then it must go to backend on 80 port. I have server certificate given by intermediate ca ...
1
vote
1answer
930 views

OS X Not Trusting Thawte Primary Root CA - G3

We recently renewed our Nginx webserver's Thawte SSL certificate. Previously we'd been using SHA1 as the signing algorithm, but this time used SHA256 which leads to a new root certificate known as ...
0
votes
1answer
58 views

Intermediate certificate not sent to clients? [duplicate]

I have installed intermediate certificate on server according to all tutorials for IIS, that is: "Certificates MMC snap-in, you choose computer store, you'll have the option to place the intermediate ...
0
votes
1answer
58 views

Can Subject Alternative Name(SAN) Certificate install on different Web Server or OS? [closed]

Let say: application.house.com apache tomcat : physical server email.house.com apache tomcat : virtual finance.house.com Oracle Wallet Manager : physical server ...
0
votes
0answers
38 views

OpenVPN and adding .p12 cert

Is there a way to add the .p12 type of cert to the openvpn config file? I've read and learned how to add the other files like so: <ca> -----BEGIN CERTIFICATE----- # insert base64 blob from ...
0
votes
2answers
195 views

Outlook/Exchange certificate errors

I have an SBS 2011 server running Exchange 2010 on which the self signed certificate recently expired. I have taken steps to re-issue the certificate but both still cause Outlook to throw a security ...
-2
votes
1answer
104 views

Need Help Forcing SSL for Remote Desktop

I have a standard windows 2008 R2 server (non-domain). I have a web service (non-IIS) I have a certificate issues from "GlobalSign" that came in a .pfx file. It's properties allow for Server ...
2
votes
0answers
33 views

How to buy a X.509 certificate for signing digital payloads

I am in a situation where my software is calling a third party web service (SOAP) and using WS-Security for client authentication using a client certificate and digital signing of the message ...
8
votes
2answers
6k views

Outlook security alert - The name on the security certificate is invalid or does not match the name of the site

SBS 2008 running Exchange 2007 and IIS6.0 CompanyA has two other companies that operate under the same roof. To accommodate email, we have 3 Exchange accounts per user to manage this. All users use ...
0
votes
0answers
71 views

WSO2EMM (MDM) Profile Installation Failed - Certificate is invalid

I followed the documentation (https://docs.wso2.com/display/EMM110/General+Server+Configurations) to generate the certificate and depoly the iOS agent but when I try to setup the certificate I have ...
0
votes
1answer
94 views

How can I generate a non ec private key from openssl via Windows?

I'm experiencing different behavior with an openssl from a linux host and a windows host. I have a pfx that I generated via a windows ca. I use openssl to dissect that pfx to create 3 pem files (ca ...
2
votes
1answer
260 views

How to solve the CA bundle included with OpenSSL may not be valid or up to date issue while trying to install a Puppet module?

Trying to fetch a module, I have the following output Notice: Preparing to install into /usr/local/etc/puppet/modules ... Notice: Downloading from https://forgeapi.puppetlabs.com ... Error: Could ...