1
vote
1answer
21 views

How to install a root certificate from file

We are in the process of migrating to Exchange 2013 on Server 2012 R2, and will be using third party certificates once fully up and running. In the meantime, however, I have been asked to use a root ...
1
vote
1answer
58 views

Do I need to resign/regen a cert when moving IPs?

Are these errors related to moving a site to a new IP and keeping the same SSL CERT? Will I need to regen/sign to fix this? [Sun Jun 22 07:13:11.054280 2014] [mpm_worker:notice] [pid 2775:tid ...
1
vote
0answers
33 views

Exchange on WP7 - 80072F0D

Last week, the self-signed certificate on our Exchange 2010 mailserver expired, so we made a new one. Everything works fine after this, except mail on Windows Phone 7. All phones are giving an error ...
0
votes
1answer
81 views

Unable to install Certificate Enrolment Policy Web Service

I'm running on Windows 2k8 Enterprise edition, and when adding the Active Directory Certificate Services, I don't see the option to add the Certificate Enrolment Policy Web service in the dialog box. ...
6
votes
1answer
81 views

Does Apache needs to know about intermediate certificates for client authentication?

I have a following hierarchy of certificates. And I need to do a client authentication on Apache. . └── root (CA) - self signed ├── intermediate 1 (CA) | ├── client1 | ├── client2 ...
4
votes
2answers
75 views

Beginning a company's digital certificate infrastructure [closed]

What type of digital certificate product do I need to begin a digital security infrastructure within my company and for use by our customers (pre-trusted by chaining)? I believe I need some kind of ...
0
votes
0answers
32 views

certificate authority service wont start

I have this CA service issue which is not starting hence not issuing any new certificate to my wireless users, when ever we try to start that this comes back with the Bad Key. 0x80090003 (-2146893821) ...
0
votes
1answer
481 views

LDAP-based Apache auth (mod_ldap + mod_authnz_ldap) using own CA for SSL/TLS

SOLVED: Turned out problem was caused by forgotten legacy LDAPTrustedGlobalCert directives in various config files, using old certificate for the same FQDN tl;dr: We uses a self-signed CA and we ...
1
vote
0answers
195 views

ADCS WebEnrollment : The context was acquired as silent

I have setup Active Directory Certificate Services with Web Enrollment and I have the following error when enrolling certificate on other computers that are in the same domain : Certificate ...
0
votes
1answer
95 views

Is it safe to delete Exchange/IIs server certificate that is not tied to any service?

Exchange [EMC] View of certs Name: Blank Self Signed: False Status: The cert is valid for exchange server usage Services: None Subject: CN=Servername.domain.local Issuer: CN=Domain-servername-CA ...
-1
votes
1answer
72 views

How can I create a free certificate for HTTPS with Apache / Ubuntu?

I have been presently muddling with StartSSL and have found it something of a challenge. Most recently I had, I thought, created and downloaded a private key, and a certificate... but they don't ...
0
votes
2answers
48 views

Send a server certificate to a customer in pkcs?

I was asked by a customer / partner company to send them the certificate for one our webservers and the corresponding root ca certificate in .pkcs or .pem format to install it in his Riverbed proxy ...
1
vote
1answer
77 views

LDAPS Only Works on Domain Certificate Authority and Not on Other Domain Controllers - Active Directory Certificate Services - Windows Server 2008 R2

I have 3 Domain Controllers with Active Directory role installed on them. I installed Certificate Services on one of the Domain Controllers. I am able to LDAPS to it, but not the others even though ...
3
votes
2answers
94 views

Using our own certificate authority for business email encryption

I've read the available similar questions on serverfault but I haven't quite found a definite answer to the security aspect of it - hence here's my question: I'm administrator of an office working ...
0
votes
1answer
167 views

Preventing Windows from deleteing our root CA

I am trying to create a Windows server with an IIS server that has a web site with client certificate authentication. The client certificates are signed by our own root CA. Because of that we must ...
0
votes
2answers
78 views

Using an SSL certificate in multiple locations

I have some issues with respect to using SSL Certificates. I have a website hosted in UK and I also have an organisation in South Africa hosting my company application online for web access. The ...
0
votes
1answer
203 views

Can't get self-signed CA cert to request corresponding client cert; Apache

I'm running Apache 2.2 on Windows, and have mod_ssl working fine for delivering a commercially signed server cert. (A wildcard cert, though I don't think it matters.) I'm trying to get the server, ...
1
vote
1answer
187 views

Client side certificates in client browsers with unix server for management

We are currently running Unix dedicated servers for everything (Web cluster, database, FTP, batch, ...) except for a Microsoft Active Directory Certificate Services. The sole purpose of this Windows ...
0
votes
0answers
130 views

Error renewing Certificate in Certificate Authority - 2003 Professional Edition

Trying to Reissue a Certificate to an expired certificate authority. I've logged into my Domain Controller, gone to the Certificate Authority and then right-clicked and went to "Renew CA ...
0
votes
2answers
135 views

What kind of SSL Cert do I need and where do I get it?

I want to have subdomains with SSL within my domain. The main difference is that each subdomain is hosted by a different person with a different public key/private key pair. Let me illustrate with an ...
1
vote
1answer
271 views

Certificates compartments (certmgr.msc)?

After reading a while , Im trying to understand what kind of certificates will be found at : Personal Other People Trusted Root Certicfiation Authorities will personal will contains only private ...
2
votes
1answer
104 views

Missing subject field values in user certificate (Windows)

I am trying to enroll (on behalf of) a user certificate but certain fields appear to be missing in the subject field. Specifically, O and OU. Using ADSI, I see that the fields have the values I want ...
5
votes
1answer
458 views

Microsoft CA certificate templates expires sooner than expected

The certificates my Microsoft CA is generating do not match the time period indicated in the template used. How can I resolve this? I recently created a new certificate template for use on my Linux ...
1
vote
2answers
318 views

Cannot start httpd service with SSL

Have an issue where I have installed new certificates on Centos 5 and modified the conf file for the following lines: SSLCertificateFile /etc/pki/tls.certs/name.crt SSLCertificateKeyFile ...
4
votes
1answer
2k views

What causes automatic install of trusted root certificate authorities into local machine's certificate store?

I spend whole day by diagnosing issue with my test services using mutual HTTPS. Services are hosted in IIS 7 on a test server running Windows Server 2008 Enterprise edition. Suddenly few weeks ago ...
2
votes
3answers
569 views

Check if root ca certificate is installed

We are having a custom CA for our local-domains. The Root CA certificate is installed on all the corporate machines by default, but sometimes it happens that we have someone here who doesn't have it ...
0
votes
1answer
4k views

How can I get SBS2011 to issue certificates?

I want to use certificates to authenticate both client and server for a new internal service. Since all our servers already have the SBS (2011 Standard) server's Cert installed as a Trusted Root, ...
1
vote
1answer
436 views

Self-signed Certificate ( Makecert.exe or CA )

I have configure PowerShell Execution policy on Server as AllSigned, so i want to create a certificate for signing a ps1 script. Can you guide me, which Certificate Should i use? I want to used ...
2
votes
1answer
257 views

Can't request computer certificate

I am using MMC with the snaping of certificates. I am requesting certificates from a brand new installation of a CA. Requesting User certificates works perfectly. Requesting Computer certificates ...
1
vote
3answers
1k views

How can an OpenVPN server be setup to use multiple certificates?

The OpenVPN documentation sets up a single certificate from a single CA to be used for all clients. Is there a way to set the server to enable multiple certificates from different CAs so long as the ...
1
vote
2answers
896 views

How do you change the cert template that IIS 7.5 uses automatically when you choose to “Create Domain Certificate”

In IIS, there is an option to "Create Domain Certificate." This works great except for one problem. The template that this process uses is the "Web Server" template in the CA which has a key with ...
1
vote
1answer
231 views

Issuing client certificates to customers

What's the best approach for issuing client certificates to customers? Should we run our own certificate services (we're on Win 2008 R2), and issue them that way? Is there a CA that will issue them ...
3
votes
1answer
835 views

Automatically create Subject Alternate Name (SAN) Certificates

We are running an enterprise CA on Windows 2008R2. I just did an update to windows 7 on my workstation. Now every time I connect to a remote server using rdp I get a warning stating that the ...
2
votes
1answer
150 views

SSL Handshake, Cannot Pinpoint Problem

When attemting to communicate with an Alfresco Server to perform a file upload the client receives the following error in their logs. SSLPeerUnverifiedException: Indicates that the peer's ...
3
votes
2answers
3k views

Cannot issue Computer cert to standalone computer from my ECA

All Windows 2K8R2 SP1 environment. I have a working Enterprise Certificate Authority in my domain. I want to issue a Computer certificate (for Server Authentication purpose) to an external, ...
1
vote
1answer
500 views

Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo? or Is StartCom better? [closed]

Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo. The site says: Our promise to you: There is absolutely no cost or commitment for your SSL certificate. ...
1
vote
1answer
487 views

Simple CA web interface for SSL certificates tracking/request/generation

I am using the nice XCA packge on my WS to generate and track the keys and CSRs we submit to various CAs, track the certificates we get back from then and to manage the full lifecycle of other ...
1
vote
1answer
369 views

Why do I get certificate error when connecting to “trusted PEAP server?”

I'm trying to connect Windows 7 machine to my wireless network secured with WPA2-Enterprise PEAP. PEAP uses server authentication so I have created root CA named FesbCA on my Windows server 2008 R2 ...
0
votes
1answer
195 views

Free OCSP server

I can't have OCSP with my current OS licensing (2008 R2 Standard) but I need this option. I'm hoping to avoid shelling out an additional $2300. Are there any open source products that could act as ...
1
vote
1answer
1k views

RDP Certificate Distribution Points

I am receiving the message "Your computer can't connect to the remote computer because the Remote Desktop Gateway's server's certificate has expired or has been revoked" when trying to access a TS ...
2
votes
1answer
255 views

Migrating from a standalone to enterprise CA

I want a peaceful transition from an old standalone CA into an enterprise CA. I am intending to offline the server on completion of this process. My thought process is to publish a CRL with a long ...
0
votes
1answer
154 views

Offline root CA - LDAP distribution point

What benefit is there in using the LDAP distribution point for an offline CA versus using only HTTP? It sounds like the process would be much simpler to use the HTTP distribution point only. I've ...
1
vote
2answers
531 views

Are code signing certificates automatically trusted across the domain if the root CA is trusted?

We have a Microsoft enterprise certificate authority, and I would like to start issuing a few code signing certificates. But what I'm unsure of is this: since all our domain/forest machines trust the ...
0
votes
1answer
340 views

There is no certificate chain in portal certificate file

I am trying to install Mcafee EMM in a lab environment. I have created an enterprise CA and created a certificate. But while installing the EMM, its showing the error of there is no certificate ...
1
vote
0answers
410 views

Certreq -retrieve can't find the specified CA

I'm currently writing a Powershell script and have run into a bit of a roadblock. Basically, the script requests, approves, and retrieves new certificates from our CA using certreq.exe and ...
0
votes
1answer
124 views

Generating SSL certificates

I use following commands to create certificates and private keys: ./CA.pl -newca ./CA.pl -newreq-nodes ./CA.pl -signreq And I set newcert.pem and newkey.pem as local certificate and private key ...
1
vote
2answers
3k views

Domain Controller promotion and certificate autoenrollment

I have this AD domain where a Windows Server 2003 SP2 Enterprise Root Certification Authority is operational, and certificate autoenrollment is enabled both for users and computers; all fine and good, ...
1
vote
2answers
1k views

Apache Client Certificate Authentication

How can I configure Apache 2 (on Ubuntu 10.04) to use Client Certificate Authentication where my domain (secure.somedomain.com) is secured by a third party trusted SSL certificate, and the client ...
2
votes
4answers
259 views

Is there a provider that offers free SSL certificates that don't give a warning in Firefox 4?

I am looking to install SSL certificates for frequently used https services. I used to use StartSSL for this, but they "temporarily" stopped offering their services. I wonder if there are any other ...
2
votes
1answer
510 views

What are the steps to create a local domain CA certificate for code signing (and export it to .pfx)?

I want to sign a .NET assembly with a code signing certificate from my local domain CA. I tried sending a certificate request and got back a signed certificate from my local domain CA in my local ...