Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
1answer
11 views

Remove active directory certificate service role - Windows Server 2008 R2

I have the following setup First DC1 - with AD DS and AD certificate services. Second DC2 - with AD, recently dcpromoted. I've never used AD CS in domain environement. I need to reinstall DC1, ...
-2
votes
1answer
20 views

Can a certificate signing request generated from a certificate using openssl have extensions? [on hold]

I am generating a self signed certificate at first. But someone wants to get it signed by another CA, I want to generate a certificate signing request from this existing certificate. Now what I want ...
1
vote
0answers
12 views

How to setup digital signatures on Microsoft CA (AD-CS)?

I've been trying to research across the web on how to setup a Microsoft CA (AD-CS on Windows Server 2008 R2) in order to create a certificate for digital signatures, allowing you to digitally sign ...
0
votes
1answer
32 views

OPENSSL Save x509 certificate of a website

I can see the certificate with this command openssl s_client -host {HOST} -port 443 -prexit -showcerts How can I save the x509 cert of the website in a PEM - File?
0
votes
0answers
11 views

Effects of changing from basic auth to cert based auth?

I have been doing a bit of research on how to solve some frustrations our users have with mobile email and it looks like changing the Exchange settings to allow cert-based auth will help. I have been ...
2
votes
2answers
127 views

How are Windows MachineKey Container File Name's Derived?

In the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys directory there's an enumeration of Key Containers. The naming convention is <uniqueGUID>_<staticGUID> and I presume the ...
2
votes
1answer
48 views

Prompt for Certificate Password When Accessing EFS Shares

My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
1
vote
1answer
55 views

New root CA will not list schema version 2 & 3 certificate templates

I'm trying to decommission a Server 2008 machine that hosts DC, NPS, and CA. I've deployed two new servers to take over as root CA and RADIUS server (both new servers are 2012R2). The new root CA is ...
0
votes
0answers
27 views

Apache Webserver: Map ClientCertificate to Active Directory

Using Apache Webserver 2.4 and mod_ssl and mod_authzn_ldap I'm trying to Authenticate the user by a ClientCertificate (PKI smartcard) Authorize the user by membership of certain Active Directory ...
1
vote
0answers
77 views

wdsutil claims Windows Server 2012 R2 drivers are unsigned, but they have a valid certificate

I'm trying to import some Windows Server 2012 R2 drivers to a driver group in WDS. My WDS server is running Windows Server 2012 (not R2). When I run the following command: WDSUTIL /Add-DriverPackage ...
1
vote
0answers
51 views

Remote Desktop Certificate Template Application Policy Extension

We are setting up remote desktop authentication with the use of certificates and ran into an issue in one of the environments. I am editing the RemoteDesktopComputer2008 certificate template, in ...
0
votes
2answers
52 views

What SSL certificate to use with web app with API on Azure?

I am creating a web service / app and hosting it on Azure. Users signing up for the service will get their own subdomain, e.g. user1.example.com. I have an API which is accessible through www. I want ...
0
votes
1answer
54 views

One Certificate to Rule them all [closed]

I'm looking to roll out Exchange 2013. We also have various web facing properties. We have an internal domain name of ourdomain.local and an external domain name of ourdomain.com. To keep things as ...
2
votes
1answer
48 views

Submit a certificate request file from a non domain computer. How to figure out policy server parameters

I'm trying to submit a certificate request. I'm trying to do it from command line so I can run it from code. Previously I have done it by using the Microsoft Active Directory Certificate Services for ...
1
vote
1answer
95 views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
3
votes
0answers
33 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
1
vote
1answer
46 views

How can I install a client certificate for all users of a computer?

I have a PFX file (.p12) that is needed to allow access a remote web page. Double-clicking on this file and following a few prompts easily adds the certificate to a personal store, but this only works ...
0
votes
0answers
140 views

HAProxy - ssl client ca chain cannot be verified

Situation: I want this to work: requests come from clients and goes to haproxy through 443 port (ssl) and then it must go to backend on 80 port. I have server certificate given by intermediate ca ...
1
vote
1answer
383 views

OS X Not Trusting Thawte Primary Root CA - G3

We recently renewed our Nginx webserver's Thawte SSL certificate. Previously we'd been using SHA1 as the signing algorithm, but this time used SHA256 which leads to a new root certificate known as ...
0
votes
1answer
37 views

Intermediate certificate not sent to clients? [duplicate]

I have installed intermediate certificate on server according to all tutorials for IIS, that is: "Certificates MMC snap-in, you choose computer store, you'll have the option to place the intermediate ...
0
votes
1answer
39 views

Can Subject Alternative Name(SAN) Certificate install on different Web Server or OS? [closed]

Let say: application.house.com apache tomcat : physical server email.house.com apache tomcat : virtual finance.house.com Oracle Wallet Manager : physical server ...
0
votes
0answers
22 views

OpenVPN and adding .p12 cert

Is there a way to add the .p12 type of cert to the openvpn config file? I've read and learned how to add the other files like so: <ca> -----BEGIN CERTIFICATE----- # insert base64 blob from ...
0
votes
2answers
124 views

Outlook/Exchange certificate errors

I have an SBS 2011 server running Exchange 2010 on which the self signed certificate recently expired. I have taken steps to re-issue the certificate but both still cause Outlook to throw a security ...
-2
votes
1answer
69 views

Need Help Forcing SSL for Remote Desktop

I have a standard windows 2008 R2 server (non-domain). I have a web service (non-IIS) I have a certificate issues from "GlobalSign" that came in a .pfx file. It's properties allow for Server ...
2
votes
0answers
26 views

How to buy a X.509 certificate for signing digital payloads

I am in a situation where my software is calling a third party web service (SOAP) and using WS-Security for client authentication using a client certificate and digital signing of the message ...
8
votes
2answers
2k views

Outlook security alert - The name on the security certificate is invalid or does not match the name of the site

SBS 2008 running Exchange 2007 and IIS6.0 CompanyA has two other companies that operate under the same roof. To accommodate email, we have 3 Exchange accounts per user to manage this. All users use ...
0
votes
0answers
44 views

WSO2EMM (MDM) Profile Installation Failed - Certificate is invalid

I followed the documentation (https://docs.wso2.com/display/EMM110/General+Server+Configurations) to generate the certificate and depoly the iOS agent but when I try to setup the certificate I have ...
0
votes
1answer
81 views

How can I generate a non ec private key from openssl via Windows?

I'm experiencing different behavior with an openssl from a linux host and a windows host. I have a pfx that I generated via a windows ca. I use openssl to dissect that pfx to create 3 pem files (ca ...
2
votes
1answer
134 views

How to solve the CA bundle included with OpenSSL may not be valid or up to date issue while trying to install a Puppet module?

Trying to fetch a module, I have the following output Notice: Preparing to install into /usr/local/etc/puppet/modules ... Notice: Downloading from https://forgeapi.puppetlabs.com ... Error: Could ...
1
vote
0answers
34 views

Attach certificate to remote desktop connection - not gateway services

I have a Windows server that I want to attach a 3rd party signed certificate for remote desktop connections. This is not a remote desktop services server, i.e. it is just remote desktop ...
0
votes
0answers
99 views

SCCM 2012 R2 and Client Certificates for HTTPS

We have a SCCM 2012 R2 site with a Management Point and a Distribution Point, all of which are using HTTPS with certificates issued by our Enterprise CA. We want to do OS Deployments (PXE for bare ...
2
votes
1answer
184 views

Importing a certificate and granting permissions on Windows Server 2012 R2

On Windows 2012 R2, winhttpcertcfg -i FileName -a CertAccount -c LOCAL_MACHINE\MY -p Password installs the certificate on Trusted Root Store instead of LOCAL_MACHINE\MY. I also need to grant access to ...
2
votes
2answers
86 views

Certificate distribution and management

I am planning to setup PKI for our organization as we're fed up with all of these security warnings when using self-signed certs. I want an offline root CA and two issuing CAs and I want to set that ...
0
votes
0answers
105 views

Require smart cards for connections to Windows 2012 remote access server

We have a Windows 2012 server accepting VPN connections over SSTP and authenticating them using the Network Policy Server feature on the same server. For client authentication we've set it up to ...
0
votes
1answer
43 views

Solution for SSL client certificates with user self service

I'm administrating a linux-based small business network. User information is centrally stored in an OpenLDAP directory. There is an existing CA which is currently used to sign server certificates. It ...
-3
votes
1answer
55 views

Is my FTP account compromised? [closed]

Today I tried to connect to my ftp account with Cyberduck. There was a popup screen saying that I had an "Unsecured FTP connection" and that "The server supports encrypted connections. Do you want to ...
0
votes
0answers
38 views

When is a deleted Windows computer-certificate really gone?

We got a strange issue affecting a very small number (1%) of Windows 7 clients in our domain. These laptops are issued a Computer-certificate (X509) through AD for VPN access. We have a PowerShell ...
1
vote
0answers
62 views

Windows - Replace subject from CSR when issuing certificate

I've received a CSR from a client with a CN, but not with all the subject fields we require. According to this answer from Scott*, it should be possible to specify the final subject values when the ...
0
votes
0answers
95 views

MS CA “certutil -deleterow” not doing anything

I'm trying to cleanup old and failed certificates on my CA using certutil. I'd like to delete all failed requests prior to July 1st, 2014. I'm running the following: certutil -v -deleterow 7/1/2014 ...
1
vote
1answer
65 views

S/MIME: signed mails with disclaimer from mail filter/mailscanner?

We have a Mailscanner, which scans incoming and outgoing mails and add a small disclaimer (Mail was checked for Viruses... bla bla bla). So far i can add a disclaimer without signing the mail, or ...
-1
votes
1answer
129 views

SSL certificate is not properly installed on Glassfish

I am an java developer not an web server/IT infra guy so i dont know wether I am asking this question correctly or not, So i apologies if I am wrong somewhere. Previously we are having an spring web ...
1
vote
0answers
89 views

Openssl cert not accepted on cisco load balancer

Been fighting a expired cert issue for the past few days. I am updating a cisco ace load balancer with an updated cert. However every time I attempt to validate the cert it is not valid or does not ...
1
vote
1answer
37 views

How to install a root certificate from file

We are in the process of migrating to Exchange 2013 on Server 2012 R2, and will be using third party certificates once fully up and running. In the meantime, however, I have been asked to use a root ...
0
votes
1answer
56 views

HTTPS Certificate error

I have a telephone system in my office which hosts its administration interface on a local webserver secured by https. When I try to access the interface I always get a certificate error, even after ...
0
votes
0answers
44 views

How do I set the certificate name as prompted by an Android phone in Microsoft ADCS?

When I import this SMIME test signing certificate, (password is the letter q) Android phones will come up with this screen: My goal is to import the certificate, with the right name, into the user ...
2
votes
1answer
167 views

Do I need to resign/regen a cert when moving IPs?

Are these errors related to moving a site to a new IP and keeping the same SSL CERT? Will I need to regen/sign to fix this? [Sun Jun 22 07:13:11.054280 2014] [mpm_worker:notice] [pid 2775:tid ...
2
votes
1answer
96 views

Using virtual smart card for server-side keys?

Does anybody know if it's possible to store private keys, belonging to service account or computer account, on Windows 8 VSC (virtual smart card)? As far as I understand, requirement for 8-symbols ...
0
votes
1answer
62 views

images not cached with self-signed SSL certificate

I'm experiencing a problem where certain content (images) are not being cached when loaded from an https connection. The issue is occurring on both local and remote hosts, both are using self-signed ...
4
votes
1answer
867 views

Unable to generate certificate with Subject Alternate Name using Java 1.7 keytool utility

I'm having an issue generating a keypair with subject alternate name using the Java keytool utility from Java 1.7. I'm attempting to follow the instructions found here An example of the command I'm ...
0
votes
0answers
150 views

Wildcard and multiname certificates aren't recognized by clients?

So, this is my problem. I have dev environment under internal domain - let's say machine name is dev. Every single working copy I create is autodetected by puppet and appropriate virtual host is ...