Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

1
vote
0answers
10 views

Attach certificate to remote desktop connection - not gateway services

I have a Windows server that I want to attach a 3rd party signed certificate for remote desktop connections. This is not a remote desktop services server, i.e. it is just remote desktop ...
-2
votes
0answers
31 views

Where can I get the cheapest SSL certificate that will be recognized by all major browsers? [closed]

I have a free StartSSL certificate which FireFox may not recognize. How and where can I get the cheapest SSL certificate (for HTTPS) that is recognized in all major browsers?
0
votes
0answers
21 views

SCCM 2012 R2 and Client Certificates for HTTPS

We have a SCCM 2012 R2 site with a Management Point and a Distribution Point, all of which are using HTTPS with certificates issued by our Enterprise CA. We want to do OS Deployments (PXE for bare ...
2
votes
1answer
30 views

Importing a certificate and granting permissions on Windows Server 2012 R2

On Windows 2012 R2, winhttpcertcfg -i FileName -a CertAccount -c LOCAL_MACHINE\MY -p Password installs the certificate on Trusted Root Store instead of LOCAL_MACHINE\MY. I also need to grant access to ...
2
votes
2answers
81 views

Certificate distribution and management

I am planning to setup PKI for our organization as we're fed up with all of these security warnings when using self-signed certs. I want an offline root CA and two issuing CAs and I want to set that ...
0
votes
0answers
61 views

Require smart cards for connections to Windows 2012 remote access server

We have a Windows 2012 server accepting VPN connections over SSTP and authenticating them using the Network Policy Server feature on the same server. For client authentication we've set it up to ...
0
votes
1answer
28 views

Solution for SSL client certificates with user self service

I'm administrating a linux-based small business network. User information is centrally stored in an OpenLDAP directory. There is an existing CA which is currently used to sign server certificates. It ...
-3
votes
1answer
40 views

Is my FTP account compromised? [closed]

Today I tried to connect to my ftp account with Cyberduck. There was a popup screen saying that I had an "Unsecured FTP connection" and that "The server supports encrypted connections. Do you want to ...
0
votes
0answers
18 views

When is a deleted Windows computer-certificate really gone?

We got a strange issue affecting a very small number (1%) of Windows 7 clients in our domain. These laptops are issued a Computer-certificate (X509) through AD for VPN access. We have a PowerShell ...
1
vote
0answers
33 views

Windows - Replace subject from CSR when issuing certificate

I've received a CSR from a client with a CN, but not with all the subject fields we require. According to this answer from Scott*, it should be possible to specify the final subject values when the ...
0
votes
0answers
35 views

MS CA “certutil -deleterow” not doing anything

I'm trying to cleanup old and failed certificates on my CA using certutil. I'd like to delete all failed requests prior to July 1st, 2014. I'm running the following: certutil -v -deleterow 7/1/2014 ...
0
votes
1answer
24 views

S/MIME: signed mails with disclaimer from mail filter/mailscanner?

We have a Mailscanner, which scans incoming and outgoing mails and add a small disclaimer (Mail was checked for Viruses... bla bla bla). So far i can add a disclaimer without signing the mail, or ...
-1
votes
1answer
47 views

SSL certificate is not properly installed on Glassfish

I am an java developer not an web server/IT infra guy so i dont know wether I am asking this question correctly or not, So i apologies if I am wrong somewhere. Previously we are having an spring web ...
1
vote
0answers
40 views

Openssl cert not accepted on cisco load balancer

Been fighting a expired cert issue for the past few days. I am updating a cisco ace load balancer with an updated cert. However every time I attempt to validate the cert it is not valid or does not ...
1
vote
1answer
29 views

How to install a root certificate from file

We are in the process of migrating to Exchange 2013 on Server 2012 R2, and will be using third party certificates once fully up and running. In the meantime, however, I have been asked to use a root ...
0
votes
1answer
47 views

HTTPS Certificate error

I have a telephone system in my office which hosts its administration interface on a local webserver secured by https. When I try to access the interface I always get a certificate error, even after ...
0
votes
0answers
28 views

How do I set the certificate name as prompted by an Android phone in Microsoft ADCS?

When I import this SMIME test signing certificate, (password is the letter q) Android phones will come up with this screen: My goal is to import the certificate, with the right name, into the user ...
2
votes
1answer
90 views

Do I need to resign/regen a cert when moving IPs?

Are these errors related to moving a site to a new IP and keeping the same SSL CERT? Will I need to regen/sign to fix this? [Sun Jun 22 07:13:11.054280 2014] [mpm_worker:notice] [pid 2775:tid ...
2
votes
1answer
55 views

Using virtual smart card for server-side keys?

Does anybody know if it's possible to store private keys, belonging to service account or computer account, on Windows 8 VSC (virtual smart card)? As far as I understand, requirement for 8-symbols ...
0
votes
1answer
39 views

images not cached with self-signed SSL certificate

I'm experiencing a problem where certain content (images) are not being cached when loaded from an https connection. The issue is occurring on both local and remote hosts, both are using self-signed ...
3
votes
1answer
188 views

Unable to generate certificate with Subject Alternate Name using Java 1.7 keytool utility

I'm having an issue generating a keypair with subject alternate name using the Java keytool utility from Java 1.7. I'm attempting to follow the instructions found here An example of the command I'm ...
0
votes
0answers
56 views

Wildcard and multiname certificates aren't recognized by clients?

So, this is my problem. I have dev environment under internal domain - let's say machine name is dev. Every single working copy I create is autodetected by puppet and appropriate virtual host is ...
0
votes
2answers
61 views

Creating a GoDaddy wildcard certificate

I have to replace a certificate with a wildcard certificate and I am unsure of the process that I need to take to do this - I have Googled this but I can't find anything particularly straightforward, ...
0
votes
1answer
87 views

Limit on X509v3 Subject Alternative Name DNSname length

I have been searching through RFC 5280, 1034, and 1123 trying to figure out what a max string length is, but I can't find it. I'm wondering if any of you happen to know. For those of you who know ...
4
votes
2answers
123 views

Delete SCCM Certificate from Command Line

So we have a situation where a contractor deployed about 200 Windows 7 computers that were cloned improperly. The SCCM cert was not cleaned off the reference machine before it was sysprepped. Now ...
1
vote
0answers
52 views

What's the Correct Way to Implement Certificates on an RDS Farm?

We currently deploying six terminal servers in a farm that will be accessed by thin clients running Windows Embedded. The idea behind the thin clients is to have a seamless single-sign on whereby as ...
0
votes
1answer
30 views

Certificate management on a MS CRM Dynamics Online instance

Having spent a week on research on this topic I have no option but to ask this: How can one add a certificate to a MS Dynamics CRM 2013 Online? I can't just go and add the certificate to the servers ...
1
vote
0answers
49 views

Exchange on WP7 - 80072F0D

Last week, the self-signed certificate on our Exchange 2010 mailserver expired, so we made a new one. Everything works fine after this, except mail on Windows Phone 7. All phones are giving an error ...
1
vote
0answers
79 views

RPC over HTTP - Outlook

I'm trying to configure an Outlook client to use RPC over HTTP so that my client can read his mail without connecting to the VPN. The mailserver is an SBS2011 server and Outlook Anywhere has never ...
3
votes
1answer
450 views

802.1x certificates, EAP-TLS, RADIUS and Windows machines

When using 802.1x certificate-based authentication on Windows machines, should I use different certificate for each machine? There is RADIUS server running in the network, the machines use EAP-TLS to ...
0
votes
1answer
142 views

Unable to install Certificate Enrolment Policy Web Service

I'm running on Windows 2k8 Enterprise edition, and when adding the Active Directory Certificate Services, I don't see the option to add the Certificate Enrolment Policy Web service in the dialog box. ...
6
votes
1answer
88 views

Does Apache needs to know about intermediate certificates for client authentication?

I have a following hierarchy of certificates. And I need to do a client authentication on Apache. . └── root (CA) - self signed ├── intermediate 1 (CA) | ├── client1 | ├── client2 ...
0
votes
1answer
128 views

Unable to install Network Deployment Enrollment Services (NDES)

I'm trying to install NDES on a Win2k8 R2 server, but I can't see the option. I've already added a user to IIS_IUSRS, and that user as sufficient priveleges since it is a part of the Administrator ...
0
votes
0answers
10 views

What is happening/where is the error when multiple accounts have the same certificate mapped?

In our environment if multiple accounts (such as a basic user and an administrative account) have the same certificate mapped this causes access issues with our web applications. By removing one of ...
4
votes
2answers
78 views

Beginning a company's digital certificate infrastructure [closed]

What type of digital certificate product do I need to begin a digital security infrastructure within my company and for use by our customers (pre-trusted by chaining)? I believe I need some kind of ...
0
votes
1answer
99 views

Exchange Server 2013 has dependency on old PDC

I am in the process of completely upgrading a Exchange 2007 system running on server 2008 R2 Hyper-V VMs hosted on a Exchange 2008 R2 domain controller. It had all the FSMO roles on it, and it was the ...
3
votes
2answers
91 views

Use DNSSEC for secure connections

From my understanding DNSSEC allows me to create a public key and sign my DNS records. There appears to be multiple ways to have a certificate record (such as DANE see ...
0
votes
2answers
1k views

openssl update 1.0.1f to 1.0.1g broke sendmail (SSL23_GET_SERVER_HELLO:tlsv1 alert decode error)

Two days ago I updated openssl 1.0.1f to 1.0.1g. Everything seamed to be fine. But after a while an error popped up in sendmail log: Apr 10 10:13:45 mail sendmail[17568]: STARTTLS=client, error: ...
1
vote
1answer
88 views

Load Balancer and using multiple SSL certificates

Here is our current production configuration at a 3rd party data center: •2 LINUX/CentOS tomcat web servers behind a shared load balancer •DNS entries point to the load balancer •Web apps are ...
0
votes
1answer
29 views

Is it possible to run pptpd with certificates and is it recommend?

To secure my internet experience, I want to set up a vpn on a on-demand way using amazon AWS EC2. My primary client is running with windows 7 professional. (Maybe further clients will be my android ...
1
vote
1answer
125 views

Puppet 3.3.1 Certificate verify failed

I`ve trouble to setup a master/node scenario with puppet 3.3.1 (puppet opensource) on both master and slaves. The slaves are on a windows and SLES machine. The Master is also on a SLES machine. The ...
1
vote
2answers
281 views

Remote Desktop Connection Issue

I have 2 HP Proliant servers with Windows Server 2008 R2 installed on them. They are headless servers, and I do not have a way of visually seeing the user interface of the servers. I do however know ...
1
vote
1answer
195 views

How to convert certificate from CA to .pfx file?

I have been struggling since last night to create a .pfx file using OpenSSL. I have been following this document and have been following the instructions under the Get a certificate using OpenSSL ...
-2
votes
2answers
82 views

Why does domain hosted with no-ip.org get rejected by browser's phishing filter/malware detection [closed]

I'm trying to host a tiny website on my home server (Windows 2012) and I am using a domain hosted with no-ip.org. That domain is forwarded to my server here at home, which is only hooked up to a ...
2
votes
1answer
79 views

Is it possible to authenticate Outlook users with certificates on RPC over HTTPS?

I would like to understand the possibility to limit access from Internet to Exchange (RPC over HTTPS in Outlook) by requiring the machine or user to present a client certificate (before the login ...
3
votes
1answer
188 views

Server 2012 R2: Remote Desktop Services, certificates, and internal .local domain

Without a unique, publicly-resolvable Active Directory domain (i.e. using foo.local vs. corp.foo.com), is it possible to achieve RDP certificate/SSO Nirvana? i.e. end-to-end, zero nag, RDP sessions ...
0
votes
0answers
27 views

getting multiple SSTP VPN certificate on client mmc console

I have succesfully installled SSTP VPN using technet document and Video on windows 2008 VM. The client can connect by installing certificate in appropriate place using mmc console. The only problem I ...
1
vote
0answers
266 views

500 OOPS: SSL: cannot load RSA private key vsftpd

Im configuring vsfptd on debian 7.3, Im trying to use ssl. I generate de certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout /etc/vsftpd/private/vsftpd2.key ...
1
vote
2answers
94 views

How to add certificate to Windows Credential Manager?

How do you add a certificate from the personal store as a certificate based credential in Windows Credential Manager? When I click on Open the Certificate Manager it just takes me to the Certificate ...
0
votes
1answer
931 views

Java Deployment Ruleset.xml Not Working

An recent upgrade of our time card system forced us to upgrade all our workstations to Java 7u51 (we were on 6u45). We have another Java-based application which is critical to our business that is now ...