0
votes
0answers
31 views

Encrypting SQL Connections: no certificates listed

We are trying to setup encrypted connection to SQL server, using the this guide. We have certificates installed and they are being used to encrypt the [http] connection to our application. When we ...
3
votes
2answers
98 views

Using our own certificate authority for business email encryption

I've read the available similar questions on serverfault but I haven't quite found a definite answer to the security aspect of it - hence here's my question: I'm administrator of an office working ...
3
votes
3answers
888 views

Can Windows log CryptoAPI CRL timouts?

I suspect that the process of building the CRL cache may cause latency in some applications. We have several .NET applications that occasionally "act slow" with no CPU or disk access. I suspect that ...
2
votes
2answers
254 views

Do I need to back up the SQL Server Encryption Password and Symmetric Key?

I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN: Create the Master Key with a strong password. Create a ...
0
votes
1answer
469 views

Wildcard certificate with SAN

I am attempting to create a wildcard SSL cert with a Subject Alternative Name (SAN) for use in IIS 7.5 and I'm having some issues. Because I need to include a SAN, I am using the Custom Certificate ...
2
votes
2answers
88 views

ssl communication handshake question

During SSL communication, the server sends its certificate to the client for authentication. Optionally, the client could send its certificate too, for client authentication. My question is, does the ...
0
votes
2answers
549 views

Apache SSL unencrypted RSA private key readable by php scripts?

For reference, this question is related to the following ones; but they do not provide the answer: Storing RSA Private Key un-encrypted ...
1
vote
1answer
4k views

Cannot open encrypted email in Outlook 2007. Error: “Cannot open this item. Your Digital ID name cannot be found by the underlying security system.”

This problem occurred after a user's computer was replaced. He reapplied for a new personal certificate from the CA, which is our SBS2003 server. Ever since, he cannot decrypt emails we send him. ...
1
vote
2answers
189 views

Storing RSA Private Key un-encrypted

We have our infrastructure on amazon ec2. Because we are growing we are setting up a basic Web Server AMI image that we will use to launch new servers as we need them. The main problem is that when ...
1
vote
4answers
256 views

Understanding Security Certificates (and thier pricing)

I work at a very small company so certificate costs need to be absolutely minimal. However for some applications we do Need to have our customers get that warm fuzzy not-using-a-self-signed ...
0
votes
1answer
139 views

SQL Server encryption/decryption

As part of disaster recovery testing I am trying to ensure that I am able to recreate my DB and still be able to decrypt previously encrypted strings. So here is what I am doing as a test... ...
3
votes
2answers
137 views

Can I have a SSL certificate for direct IP access?

Is it possible to have a SSL certificate for access directly to an IP, and not through a hostname? Eg, can I purchase an SSL certificate to make https://1.2.3.4/ work without giving a security ...
1
vote
1answer
5k views

SqlServer 2008 How to correctly install/configure SSL certificate to require encrypted connections

SqlServer 2008 instance is installed on Windows Server 2008 and is running under this identity: NT AUTHORITY\NETWORK SERVICE SSL cert from third-party CA has been installed in Local Computer\Personal ...
3
votes
3answers
16k views

'Certificate types are not available' When creating computer certificate?

Environment Windows Server 2008 sp1 Xeon CPU E5430 @ 2.66 GHz 16.0 GB Ram 64-bit Operating System 1TB Disk Space Server Role: SQL Server Other Information: Joint to domain, Logged in user domain ...
4
votes
5answers
33k views

convert .p7b key to a .pfx

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled. Trying with openssl I ...
5
votes
3answers
292 views

PKI keys per service or per server?

We all have a lot of internal services that need encryption and authentication to be provided by some sort of PKI. Do the security gains of using a different private/public key pair for each service ...