0
votes
1answer
41 views

HTTPS Certificate error

I have a telephone system in my office which hosts its administration interface on a local webserver secured by https. When I try to access the interface I always get a certificate error, even after ...
0
votes
1answer
98 views

Unable to install Certificate Enrolment Policy Web Service

I'm running on Windows 2k8 Enterprise edition, and when adding the Active Directory Certificate Services, I don't see the option to add the Certificate Enrolment Policy Web service in the dialog box. ...
0
votes
1answer
97 views

Unable to install Network Deployment Enrollment Services (NDES)

I'm trying to install NDES on a Win2k8 R2 server, but I can't see the option. I've already added a user to IIS_IUSRS, and that user as sufficient priveleges since it is a part of the Administrator ...
1
vote
1answer
94 views

Puppet 3.3.1 Certificate verify failed

I`ve trouble to setup a master/node scenario with puppet 3.3.1 (puppet opensource) on both master and slaves. The slaves are on a windows and SLES machine. The Master is also on a SLES machine. The ...
1
vote
2answers
77 views

How to add certificate to Windows Credential Manager?

How do you add a certificate from the personal store as a certificate based credential in Windows Credential Manager? When I click on Open the Certificate Manager it just takes me to the Certificate ...
1
vote
2answers
30 views

I made a mistake in renewing my cert, can you help me figure out what I did wrong? MS IIS 7 ISA

Sorry if this is a duplicate question, but I didn't see anything like my problem. This is also my first time renewing a cert. So, a bit of backstory. We have a sharepoint site, with a ISA firewall ...
2
votes
1answer
141 views

How does Windows Event forwarding work with non domain computers? (certificates)

In reasearching this question I've looked at the following documents and none of them describe the options or flexibility of the event collector service. Microsoft's Event Collector Service on ...
0
votes
0answers
51 views

How can I find the certificate that belongs to a filename from the MachineKeys folder?

I know about the FindPrivateKey.exe tool to map a certificate to a filename on disk. I'm looking for the reverse. Is there a way to find the certificate associated with a filename from the ...
2
votes
0answers
403 views

SChannel “cannot find certificate in either LocalMachine or CurrentUser store”

We have an in-house application that requires the use of client SSL certificates to authenticate with a remote server (not under our control). This has worked without problems before but on deploying ...
1
vote
1answer
50 views

Website authentication with a certificate from a different domain

My question: Is there a better way to enable authentication between 2 domains than what I'm doing below, and is Name Mapping the right thing to use? There are 2 domains; One is the primary ...
0
votes
1answer
176 views

Preventing Windows from deleteing our root CA

I am trying to create a Windows server with an IIS server that has a web site with client certificate authentication. The client certificates are signed by our own root CA. Because of that we must ...
1
vote
1answer
76 views

Mail From Outlook/Exchange Sent to Destination Spam

I have a unique problem and I am hoping someone may have some direction to provide me. We have a Windows environment with an Exchange 2007 Server. For some reason when a user sends an email from ...
0
votes
0answers
121 views

Custom certificate/key pair does not work on OpenVPN clients

I have setup very basic OpenVPN network on Windows Server 2008. My clients are IP Cameras having Unix OS and built-in feature of openVPN connectivity. Initially I used a common client certificate/key ...
0
votes
1answer
3k views

Importing certificates on Windows 2008 - “The integrity of this certificate cannot be guaranteed…”

I need to set up secured communications between two windows machines. I have generated a set of certificates for this purpose and saved them as .x509 files. If I set about installing those on ...
0
votes
1answer
152 views

Remotely configure OpenVPN custom client certificates and static Virtual IP

On our current basic OpenVPN (on Windows) setup, we are using common client certificates for all clients. In order to introduce some kind of security, what are the possible measures I can make ? ...
2
votes
2answers
458 views

Problem with Minimum Certificate Key Length and WinXP

The problem all started when Mircosoft updated the security of systems by requiring a minimum key length of 1024. Please refer to Microsoft Security Advisory (2661254). In the past, we were using the ...
1
vote
1answer
65 views

What format should the .CER file have in the AIA record of a certificate?

I'm updating the .cer file referenced in my end entity's AIA record. What format should I save the file in? By default Windows allows me to save as DER encoded binary X.509 (.cer) Base-64 encoded ...
1
vote
1answer
160 views

How to dump certificate file from installer via command-line?

I'm building a script that will download and install a bunch of programs. One of those programs depends on a virtual driver, which needs its certificate to be imported in order to function. Normally, ...
1
vote
1answer
540 views

Windows CA to issue certificate to authenticate SSH to a Linux server

I have a Windows Server Root Certificate Authority, Linux SSH server, and users with Windows SSH clients. The Linux box is not part of the AD domain (and probably never will be [sigh]) OpenSSH 5.4 ...
0
votes
1answer
427 views

Exchange certificate questions

I got the following message The STARTTLS certificate will expire soon. Now I tried to create new certificates, but currently the old ones are still used. Questions: Can I backup the old certificate ...
0
votes
2answers
772 views

Run SVN commands with self signed SSL cert

I am running the following command: svn info --non-interactive --trust-server-cert --no-auth-cache --xml "https://ommited/svn/YAMS" Unfortunately, I am getting the following error: ?xml ...
3
votes
3answers
890 views

Can Windows log CryptoAPI CRL timouts?

I suspect that the process of building the CRL cache may cause latency in some applications. We have several .NET applications that occasionally "act slow" with no CPU or disk access. I suspect that ...
2
votes
0answers
114 views

Certificate enrollment request chain not trusted

I am working on a MSFT lab for Direct Access, and need to create a Web certificate. The instructions ask be to do the following: On EDGE1, click Start, type mmc, and then press ENTER. Click ...
2
votes
1answer
151 views

What is “certs” in openssl.conf for?

In the openssl.conf can I e.g. see [ CA_default ] dir = $ENV::KEY_DIR # Where everything is kept certs = $dir # Where the issued certs are kept crl_dir ...
1
vote
0answers
60 views

Get ALL certificates installed in a Windows 2003 box

It seems that one of our Servers has a certificate that has expired, unfortunately we cannot find it, in other words, it's not in the local machine store or any of the personal stores of any of the ...
0
votes
1answer
472 views

Wildcard certificate with SAN

I am attempting to create a wildcard SSL cert with a Subject Alternative Name (SAN) for use in IIS 7.5 and I'm having some issues. Because I need to include a SAN, I am using the Custom Certificate ...
2
votes
2answers
1k views

Unable to add certificate to the Trusted Root Certification Authorities in Windows 7

I am trying to add an apple developer certificate for sending Push notifications to my Trusted Root Certification Authorities section. I get an error like so: "The import failed because the store was ...
2
votes
1answer
873 views

SSH from Windows to Linux with AD certificates

I have a Windows client machine connected to Active Directory and a Linux server also connected to Active Directory (through PAM w/ LDAP), and I want to be able to do password-less SSH from Windows to ...
0
votes
1answer
340 views

There is no certificate chain in portal certificate file

I am trying to install Mcafee EMM in a lab environment. I have created an enterprise CA and created a certificate. But while installing the EMM, its showing the error of there is no certificate ...
4
votes
2answers
5k views

Syntax of certutil.exe?

On Windows, you can use certutil.exe to manage certificates. But it really has lots of options, and the command help (as much as Google) doesn't help clearly understanding it. What is the exact ...
3
votes
3answers
751 views

How to stop connecting to www.download.windowsupdate.com

I work with Windows Client and Server systems on a private network that cannot reach the internet. Problem is, many programs (like Subversion) cause Windows to attempt connections to ...
3
votes
3answers
4k views

Windows 7 appears to select inconsistent anchor during wireless connection

We have a wireless authentication server (Windows 2003 SP2 with IAS). It is configured with a DigiCert certificate. The certificate chain looks like this: Entrust.net Secure Server Certification ...
2
votes
1answer
201 views

Self signed certificate - what domain? (Apache, Windows)

I need to create SSL access to my logon page, accessed mostly via Intranet but possibly via Internet too. The server is Apache on Windows XP Proff (or Win 2003 server). I have created my certificate ...
3
votes
1answer
3k views

How to create self signed wildcard (*.domain.com) certificate

I'm trying to install Dynamics CRM 2011 RC and configure it for Internet Facing Deployment. One of the requirements for this is a wildcard SSL certificate. Since I'm installing development/testing ...
0
votes
1answer
739 views

A non interactive alternative to makecert

I have a need to create a self signed certificate non interactively. Unfortunately, the only tool that I know of (makecert) is interactive - it uses GUI to ask for a password. My OS is Windows (from ...
2
votes
1answer
916 views

How do you revoke a certificate?

In a network of more than 300 machines all running on Windows Server 2003 and clients running Windows 2000 Professional and Windows XP Professional, Microsoft Certification Server in enterprise CA ...
1
vote
2answers
8k views

Deploy root/trusted publisher certificate file to windows machines

I have a self-signed .cer certificate that I need to deploy to roughly a 1000 machines, running a variety of Windows versions from Windows XP and Server 2003 up to Windows 7 and Server 2008 R2. SCCM ...
1
vote
2answers
406 views

Impact Disabling “Update Root Certificates” Has On SQL Server

I was told that Disabling the Update Root Certificates option from the Windows Components section of Add/Remove Programs will cause SQL Server to stop working properly. It this correct, or is my ...
3
votes
2answers
2k views

Creating Client Certificate - Windows

I am trying to create client certifications against a microsoft CA using the built in website. (Microsoft Active directory Certificate Services) From what I can tell you have to login as the user to ...
5
votes
2answers
2k views

Import a bunch of certificates into the correct certificate store using a script

I have a collection of certificates in a p7b file, and I would like to automatically import each certificate into the correct store depending on the certificate template. What is the best way to do ...
0
votes
1answer
302 views

How to Add Self-Issued CA Generated by VMWare to Browser's (IE) Trusted CA?

I just installed VMware Server 2.x. The install provides a shortcut to a URL using HTTPS (e.g. https://mybox/something), and the certificate presented by VMWare's internal web server is issued to ...
0
votes
2answers
3k views

Certificate Authority - Network Ports?

We are optimizing our QOS router settings and it was decided that we should give priority to our PKI infrastructure. As far as I'm aware, there is network traffic when certificates are verified and ...
0
votes
1answer
4k views

What is correct syntax to verify a certificate in the certificate store using certutil.exe?

I have a client certificate in certstore. I try this: certutil.exe -verify CertCommonName but in get this error when I ping certutil.exe -ping it connect to pc. DecodeFile returned The system ...
1
vote
3answers
121 views

How to get started with Windows Server?

I've been a *nix (from VMS to Linux to FreeBSD to Solaris etc) admin for the past five years and I have just recently had it dumped on my plate that i am going to be running some Windows Servers. I'm ...
2
votes
2answers
2k views

OpenVPN with a Windows Certificate Services PKI

has anyone tried using OpenVPN with certificates generated by Windows Certificate Services? In theory this should work. The provided easy-rsa PKI is not very comfortable to manage for many users. I ...
1
vote
2answers
1k views

IE7 stops sending client SSL certificate

We use client SSL certificates to secure web-based user communications with our web server (the edit site for a SharePoint site). Certificates are generated internally and sent to users to be ...
9
votes
2answers
9k views

How do I deploy an internal certificate authority?

IE7 aggressively warns about certificate failure; we have some internal sites that run over HTTPS and thus need a valid cert. We appear to have an certificate authority on the intranet that can sign ...
1
vote
1answer
950 views

Auto Enroll all servers for RDP certificate

I am running Windows 2008, and have an Enterprise CA installed. How can I make all servers auto-enlist to get a certificate for RDP? I don't want to have to do this manually on each machine.