In cryptography, a certificate authority, or certification authority, (CA) is an entity that issues digital certificates.

learn more… | top users | synonyms (1)

3
votes
2answers
2k views

Cannot issue Computer cert to standalone computer from my ECA

All Windows 2K8R2 SP1 environment. I have a working Enterprise Certificate Authority in my domain. I want to issue a Computer certificate (for Server Authentication purpose) to an external, ...
1
vote
1answer
446 views

Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo? or Is StartCom better? [closed]

Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo. The site says: Our promise to you: There is absolutely no cost or commitment for your SSL certificate. ...
1
vote
1answer
411 views

powershell and remote signing

I've created a power shell script to run on start-up but its not working. I've never run a script through group policy so i don't know what the restrictions/best practices are. I've been told i need ...
2
votes
1answer
204 views

How do I set up my own CA for certs and begin importing it in my Computers and/or browsers

I'd like to set up my own Certificate Authority to sign things that are only used internally. Does anyone have any steps they've used to set up their own CA and begin signing certs. I'd also like to ...
2
votes
1answer
1k views

Sign an OpenSSL .CSR with Microsoft Certificate Authority

I'm in the process of building a Debian FreeRadius server that does 802.1x authentication for domain members. I would like to sign my radius server's SSL certificate (used for EAP-TLS) and leverage ...
1
vote
1answer
435 views

Simple CA web interface for SSL certificates tracking/request/generation

I am using the nice XCA packge on my WS to generate and track the keys and CSRs we submit to various CAs, track the certificates we get back from then and to manage the full lifecycle of other ...
2
votes
1answer
484 views

How long can a Microsoft Server CA be down before a cert will fail?

We are using self-signed certificates for internal development machines and other internal connection encryption. The certificates were created using Microsoft Certificate Server. I need to move ...
1
vote
1answer
362 views

Why do I get certificate error when connecting to “trusted PEAP server?”

I'm trying to connect Windows 7 machine to my wireless network secured with WPA2-Enterprise PEAP. PEAP uses server authentication so I have created root CA named FesbCA on my Windows server 2008 R2 ...
2
votes
1answer
565 views

Windows 7 Pro Remote Desktop, improper client-side Certificate warning

I have a standard Windows 7 Pro x64 workstation which has Remote Desktop enabled, the workstation is part of a domain (Samba3, so NT4 style). I have followed these instructions to my success, the ...
0
votes
1answer
186 views

Free OCSP server

I can't have OCSP with my current OS licensing (2008 R2 Standard) but I need this option. I'm hoping to avoid shelling out an additional $2300. Are there any open source products that could act as ...
-1
votes
1answer
497 views

How can i import CA certificates to my Linux server(Archlinux)? [closed]

i can only connect my server by ssh,none web browser and other GUI tools.
1
vote
1answer
1k views

RDP Certificate Distribution Points

I am receiving the message "Your computer can't connect to the remote computer because the Remote Desktop Gateway's server's certificate has expired or has been revoked" when trying to access a TS ...
1
vote
2answers
3k views

apache Client Certificate Authentication errors: Certificate Verification: Error (18): self signed certificate

So I have been following instructions on setting up Client Certificate Authentication in Apache2 w/ mod_ssl. This is solely for the purpose of testing an application against CAA, not for any sort of ...
2
votes
1answer
812 views

Why might Windows falsely claim a self-signed root CA certificate is revoked?

I created a self-signed root CA cert for internal test use, using openssl. This has been successfully installed and used as a trusted CA on a number of machines and platforms (Windows, Linux, various ...
0
votes
1answer
413 views

How do I create a certificate with HP Systems Management Homepage with Windows 2008 R2

I'd like to get a trusted, or even better a "green bar" certificate from my Windows 2008 R2 CA to work with my Insight manger home page of https://host:2381 I tried importing the file ...
2
votes
1answer
232 views

Migrating from a standalone to enterprise CA

I want a peaceful transition from an old standalone CA into an enterprise CA. I am intending to offline the server on completion of this process. My thought process is to publish a CRL with a long ...
0
votes
1answer
146 views

Offline root CA - LDAP distribution point

What benefit is there in using the LDAP distribution point for an offline CA versus using only HTTP? It sounds like the process would be much simpler to use the HTTP distribution point only. I've ...
1
vote
2answers
482 views

Are code signing certificates automatically trusted across the domain if the root CA is trusted?

We have a Microsoft enterprise certificate authority, and I would like to start issuing a few code signing certificates. But what I'm unsure of is this: since all our domain/forest machines trust the ...
0
votes
2answers
133 views

How can I make a private SSL certificate be trusted by end-users on two seperate ActiveDirectory domains

I have a web application that utilizes SSL. The website is not publicly facing, and is for private internal access only at our enterprise. For security reasons, we run two separate Active ...
1
vote
1answer
994 views

Can I remove the DC role from a W2k8 server being an Enterprise CA?

Is it possible to run a W2k8 Enterprise (AD-integrated) Certificate Authority on a server that it not a domain controller - mine currently is a DC and I do not remember whether this was a requirement? ...
1
vote
1answer
164 views

ArcServer creates additional jobs

We're running CA ARCserve Backup r12.5 (Build 5854) - Small Business Server Edition on our Small Business Server 2008. There is a daily job which saves the systemdrive, exchange and 3 databases to our ...
1
vote
1answer
510 views

Implications of Root CA without CRL

I'm currently setting up a PKI for my company and while I have come up with a good layout and planned the overall policy of certificate issuance, I'm still puzzled by what role the CRL plays. By ...
0
votes
1answer
836 views

Issuing Computer Certificates to Non-Domain Members (Enterprise CA)

I am trying to implement remote client access using L2TP/IPSec VPN for both domain members and non-members. Domain members is fine and working OK but I am having trouble issuing a certificate to the ...
0
votes
1answer
319 views

There is no certificate chain in portal certificate file

I am trying to install Mcafee EMM in a lab environment. I have created an enterprise CA and created a certificate. But while installing the EMM, its showing the error of there is no certificate ...
1
vote
1answer
336 views

I can't install Enterprise root CA in windows 2003

I am trying to install Enterprise CA in my windows server 2003.But I can select only stand alone root CA and the stand alone subordinate CA. Other two options are not highlighted. Can anybody give me ...
0
votes
1answer
292 views

CA cert error when setting up git submodules on PPC Mac 10.5.8

I have a git repository with submodules on github, when I try and set up the submodules locally by doing: git submodule init git submodule update I get this error: error: SSL certificate problem, ...
2
votes
3answers
371 views

Run `certutil -DCInfo` on a different target domain

It seems that running certutil.exe -DCInfo Verify will check the certificates for all domain controllers in the domain of the logged-in user account. In our AD forest, we have a handful of domains. I ...
5
votes
2answers
3k views

Certificate Template Missing from “Certificate Template to Issue”

I'm having a problem similar to that posted in this question: Missing Certificate template From certificate to issue The short version is that I've created a duplicate certificate template and I'm ...
0
votes
1answer
217 views

Disaster Recovery with one 2008R2 DC and a 2003R2 DC

I am working out DR scenarios and one was making me scratch my head: Currently our domain has a 2008R2 DC and a 2003R2 DC. I know bringing restoring DCs can sometimes be harmful to an AD if others ...
1
vote
0answers
390 views

Certreq -retrieve can't find the specified CA

I'm currently writing a Powershell script and have run into a bit of a roadblock. Basically, the script requests, approves, and retrieves new certificates from our CA using certreq.exe and ...
1
vote
1answer
86 views

Drawbacks in use an internal CA for a production Exchange 2007/2010 SAN certificate

Is there any critical drawback in using an internal CA to release an Exchange 2007/2010 SAN certificate for a production environment?
0
votes
1answer
132 views

Understating certificate authority nesting

Given we have the following network/CA structure: Win2K8R2 - Root CA - no idea where its' certificate is? Win2K8R2 - Sub CA - obtained CA certificate from Root CA Win2K8R2 - OWA 2010 (Basically, a ...
0
votes
1answer
524 views

Renewing a OCSP and OWA certificates for Exchange 2010

We have been using an Exchange 2010 mail server for a year now. Today the certificates used in Exchange, as well as of Forefront TMG expired. We had the following certificate chain: Root CA issued a ...
21
votes
5answers
1k views

How to secure your CA's private key?

I'm about to implement my own Certification Authority (CA) for interal use only. Now there is a problem, that the CA private should never ever be exploited. So right now the private key is encrypted. ...
1
vote
1answer
263 views

Linux Certification Authority signing Windows 2003 Server certificate requests

I've had some success using a Windows 2003 Server running as a Certification Authority signing certificates used in secure communications between Ubuntu Linux and Active Directory on Windows 2003 ...
18
votes
4answers
8k views

Certification authority root certificate expiry and renewal

In 2004, I set up a small certification authority using OpenSSL on Linux and the simple management scripts provided with OpenVPN. In accordance with the guides I found at the time, I set the validity ...
0
votes
1answer
119 views

Use Certificate Autoenrolment with third-party Certificate Authority

Is it possible to setup Windows Domain to use Certificate Autoenrolment and third-party Certificate Authority? We think that it can be done in Windows Server 2008 only but don`t know exactly, please ...
2
votes
2answers
508 views

Disabling EFS--what to do if there are any encrypted files?

I am in the process of retiring an old Windows-integrated CA and bringing online a new, properly-configured one (several, actually). Most of our systems are unable to use EFS thanks to Group Policy... ...
1
vote
0answers
341 views

Change name of Win Server 2008 computer after CA install

I am importing an old certificate database into the new CA on a new server I'm installing. I am warned by Windows that I can't change the computer name, domain settings, etc., after installing the CA. ...
0
votes
1answer
122 views

Generating SSL certificates

I use following commands to create certificates and private keys: ./CA.pl -newca ./CA.pl -newreq-nodes ./CA.pl -signreq And I set newcert.pem and newkey.pem as local certificate and private key ...
0
votes
2answers
2k views

SSL troubles - Generate .key from .crt? (AlphaSSL)

This is greatly troubling me, I have generated a .csr and .key file to send to dynadot (which sends that to AlphaSSL) with this command: openssl req -out foo.com.csr -new -newkey rsa:2048 -nodes ...
2
votes
2answers
665 views

Is it safe to reboot a Windows 2003 certificate authority server? What problems might occur?

My company has a Windows 2003 root certificate authority server which is used to generate client certificates for Remote Desktop Services logins, as well as certificates for internal HTTPS websites. ...
1
vote
1answer
609 views

Windows 2008 CA and Windows 2003 AD?

I have a Windows 2003 AD and I set up a root ca and a sub ca both of which are windows 2008(joined to domain).I need to use the sub ca to generate end user certificates for digital signature , they ...
1
vote
2answers
3k views

Domain Controller promotion and certificate autoenrollment

I have this AD domain where a Windows Server 2003 SP2 Enterprise Root Certification Authority is operational, and certificate autoenrollment is enabled both for users and computers; all fine and good, ...
1
vote
2answers
986 views

Apache Client Certificate Authentication

How can I configure Apache 2 (on Ubuntu 10.04) to use Client Certificate Authentication where my domain (secure.somedomain.com) is secured by a third party trusted SSL certificate, and the client ...
0
votes
1answer
311 views

Making a CA for RAS and IAS for wifi on Server 2003 Standard

I am working for a small nonprofit with a few servers running 2003 standard. Before you ask, there is no budget for server upgrades unless someone donates money for the task. I am changing over the ...
0
votes
1answer
243 views

Creating an MS Certificate Authority using CA Root Certificate created with OpenSSL

Using the guide here: http://www.davidpashley.com/articles/cert-authority.html I have create a certificate authority using OpenSSL. However I would now like to use the Microsoft CA instead. The ...
2
votes
4answers
256 views

Is there a provider that offers free SSL certificates that don't give a warning in Firefox 4?

I am looking to install SSL certificates for frequently used https services. I used to use StartSSL for this, but they "temporarily" stopped offering their services. I wonder if there are any other ...
7
votes
1answer
268 views

What happens to encrypted mails when CA certificate expires in my Windows Domain

does anybody know what will happen to encrypted /signed mails when a root authority certificate expires in my domain network? Can the certificate still be validated from the clients and will the ...
5
votes
2answers
5k views

Adding new root/enterprise CA without disturbing existing one?

I am looking at installing a new AD-integrated enterprise certificate authority structure, but have discovered that somebody already has created a CA (mostly used for SSL on internal websites). I ...