Tagged Questions

0
votes
0answers
73 views

Short Lifing CRLs for NPS EAP-TLS Authentication?

I got a question which i'm unable to find an answer for on any official MS ressource. Image a CA with realy short lifing CRLs (like 1 day). The CA is used only for two purposes: creating NPS ...
1
vote
1answer
34 views

What format should the .CER file have in the AIA record of a certificate?

I'm updating the .cer file referenced in my end entity's AIA record. What format should I save the file in? By default Windows allows me to save as DER encoded binary X.509 (.cer) Base-64 encoded ...
0
votes
0answers
53 views

Certificate in My Store and LDAP

Hi all, When issue a Certificate (cert), 2 cert are created on Client: - 1 cert is created in My Store (Personal) and this cert includes private key. - 1 cert is created in LDAP (Active Directory ...
1
vote
1answer
42 views

Does a VPN certificate request need to be encrypted

We have a Cisco 3000 VPN concentrator and use the Cisco VPN client to generate certificate requests, which we then create/authenticate on our certificate server. When the help desk generates the ...
0
votes
1answer
153 views

Free OCSP server

I can't have OCSP with my current OS licensing (2008 R2 Standard) but I need this option. I'm hoping to avoid shelling out an additional $2300. Are there any open source products that could act as ...
1
vote
1answer
735 views

RDP Certificate Distribution Points

I am receiving the message "Your computer can't connect to the remote computer because the Remote Desktop Gateway's server's certificate has expired or has been revoked" when trying to access a TS ...
0
votes
1answer
153 views

Shorten CA Certificate lifetime with Certificate Services?

I recently setup Windows 2003 Certificate Services and installed a five year certificate. I'm now working with a vendor that requires our public CA key so that they can trust all certificates ...
2
votes
2answers
2k views

OpenVPN with a Windows Certificate Services PKI

has anyone tried using OpenVPN with certificates generated by Windows Certificate Services? In theory this should work. The provided easy-rsa PKI is not very comfortable to manage for many users. I ...
5
votes
3answers
276 views

PKI keys per service or per server?

We all have a lot of internal services that need encryption and authentication to be provided by some sort of PKI. Do the security gains of using a different private/public key pair for each service ...