In cryptography, a certificate authority, or certification authority, (CA) is an entity that issues digital certificates.

learn more… | top users | synonyms (1)

2
votes
1answer
500 views

What are the steps to create a local domain CA certificate for code signing (and export it to .pfx)?

I want to sign a .NET assembly with a code signing certificate from my local domain CA. I tried sending a certificate request and got back a signed certificate from my local domain CA in my local ...
0
votes
1answer
967 views

Certification Authority Service starts and stops SBS 2008

We moved from a SBS 2003 Server to a SBS 2008 server relatively recently because the SBS 2003 was having major hardware issues. I followed the Migration guide to the letter and everything seemed to ...
2
votes
2answers
1k views

Windows Server 2003 Root CA - what can cause root CA cert to update?

I am specifically referring to a self-created Root CA on our domain controller (Windows Server 2003 SP2) that all our domain clients trust for internal use, not GoDaddy, Verisign, etc Root CA. Maybe ...
1
vote
1answer
951 views

How to configure squid for inspecting https requests and pages?

I wish to allow squid to block https requests by full URL regex matching (not just domain) and to block https responses by inspecting page contents. Is there some step by step guide for how to set ...
-1
votes
1answer
58 views

CA server is going to be decommissioned. What will happen with internal-reverse proxy connection?

Tell me please what will happen if my ssl CA server is decommissioned and I am using certificates signed by this CA to establish connection between internal Apaches and reverse proxies Apaches? ...
0
votes
1answer
376 views

Looking for a solution to organization's Emails using Encryption certificates, details on requirements inside

We are interested in rising the security level of the corporate emails for a few reasons: 1) Protect internal information from leaks. 2) Mails to customers would be Signed. 3) A way to mark that a ...
0
votes
1answer
4k views

Lync Server Deploy Certificate Verification Failed

Just got my Lync server deployed on Windows Server 2008 R2 and am trying to connect via Lync client on a different machine. When attempting to sign in, the client throws an error saying "Cannot sign ...
1
vote
1answer
124 views

Hierarchical certification authorities and CRLs

If I implement a PKI with multiple levels of CAs, do I need to have a CRL for each individual CA or can I just have one CRL for the entire hierarchy (i.e. point all certificates to a single CRL), or ...
2
votes
2answers
1k views

Does any Certificate Authority support both SAN and wildcards?

My basic quandry is that wildcard certificates don't support subdomains of subdomains, nor do they help with alternate domain names. Basically, if my CN is example.com, I want a Subject Alternative ...
0
votes
1answer
574 views

Authentication with USB tokens on IIS, Windows Server 2008

I only have a installed Windows Server 2008 with Active Directory Domain, Web Server (IIS) and a bunch of USB Tokens on the table. Which are the steps to install the necessary components and ...
0
votes
1answer
824 views

Proper procedure to replace VeriSign certificates in Tomcat

I have been having some issues at a client site renewing an SSL cert that previously worked fine. I am familiar with the keytool JDK command line app, and it was how I installed the intermediate CA ...
3
votes
3answers
2k views

Docs for OpenSSH CA-based certificate based authentication

OpenSSH 5.4 added a new method for certificate authentication (changes). * Add support for certificate authentication of users and hosts using a new, minimal OpenSSH certificate format (not ...
0
votes
1answer
63 views

Root Certificate Not Applied to Imaged Machines

We have a certificate authority / server in our domain. If we install new machines and join them to the domain, they automatically receive the root certificate in their Trusted Root Certification ...
1
vote
1answer
321 views

Do I need to take special care when decommissioning a certificate server in a windows domain?

I'm setting up a new Windows 2008 R2 server to take over from a older Windows 2003 box in a small windows domain. I discovered that the old server is running the only certificate service in the ...
1
vote
4answers
253 views

Understanding Security Certificates (and thier pricing)

I work at a very small company so certificate costs need to be absolutely minimal. However for some applications we do Need to have our customers get that warm fuzzy not-using-a-self-signed ...
3
votes
1answer
7k views

How to configure what certificates can be issued using Web Enrollment in Windows Server 2008 R2 Enterprise?

I have a CA installed on of my Windows Servers in a small farm of systems. I've installed the Certification Authority Web Enrollment and Certificate Enrollment Web Service roles on the CA. I want to ...
2
votes
1answer
3k views

Using an AD-integrated Enterprise CA to issue an Exchange 2010 certificate

I have a small test network that includes Win2k8 R2 machines, an Enterprise CA server and an Exchange 2010 SP1 RU1 CAS server. I would like to issue a certificate for Exchange from the CA. As the ...
1
vote
2answers
7k views

Deploying internal certificate via GPO - will this only work for IE?

I am contemplating adding AD CA role to our server and using GPO to add a self signed, trusted certificate to all internal clients (to ease testing)... Some of the related questions regarding this ...
1
vote
4answers
499 views

Man In The Middle Attacks vs. SSL Certificate Authorities

What stops someone from MITM-attacking the request to the certificate authority to verify the certificate? Does the browser come pre-loaded with the public keys of the trusted certificate authorities ...
2
votes
3answers
201 views

Which SSL certificate to use for non-financial application

Based on the answers to this question, I'd like to secure my website using SSL. Now there are several types of certificates and I don't know which one to choose. My application doesn't include any ...
1
vote
2answers
2k views

How do you configure Apache/Tomcat to trust internal Certificate Authorities for server-to-server https requests

I need to perform web service calls from within my own web server running on Apache/Tomcat. Apache/Tomcat running on Linux needs to make calls out to a Microsoft server running IIS over HTTPS that ...
0
votes
1answer
715 views

How do you configure IIS to trust internal Certificate Authorities for server-to-server https requests

I need to perform web service calls from within my own web server running on IIS. IIS needs to make calls out to another non-Microsoft (Linux) server over HTTPS that uses an internal Certificate ...
-1
votes
2answers
190 views

How to turn Certificate Request into certificate

We have set up a Certificate Authority, We have now created a certificate request. How do we turn this certificate request into an actual certificate at the authority?
0
votes
1answer
392 views

Server HTTPS access not working after re-install

I've setup a Citadel groupware server, plus its WebCit web admin interface. It worked well with HTTPS access. However, I had to reinstall the server, and when I try to access the server again via ...
0
votes
2answers
4k views

Custom Certificate Template is listed as unavailable

I am trying to create a custom certificate template based off of the Smartcard User template with a Windows Server 2008 Enterprise subordinate CA. I am using the subordinate CA because the root CA is ...
2
votes
1answer
846 views

How do you revoke a certificate?

In a network of more than 300 machines all running on Windows Server 2003 and clients running Windows 2000 Professional and Windows XP Professional, Microsoft Certification Server in enterprise CA ...
15
votes
2answers
2k views

Can MS Certificate Services be a Subordinate to CA created with OpenSSL

I want to setup a enterprise certification authority for my domain. So I can issue certificates for various purposes. I would like to follow the best practice of having an offline CA as the root, ...
0
votes
2answers
102 views

Certificates expire without warning

A while back, we set up an internal microsoft certificate server to issue certificates to our internal servers. However, when a certificate expires, we do not realize it until we start getting errors ...
1
vote
1answer
878 views

Unrevoke a certificate which was revoke with a status different from Certificate Hold

Is there a way to unrevoke a revoked certificate, which was revoked with the “Superseded” reason code? I'm using the Certification Authority provided with Windows Server 2008 SP2.
0
votes
2answers
2k views

Tomcat behind Apache httpd with SSL and client-certificates

I try to evaluate a infrastructure for a customer on my local win32 machine. The infrastructure should be based on a j2ee webapp running on a tomcat (6.0.20+), behind a secur apache httpd ...
2
votes
1answer
857 views

Windows Server 2008 SBS bind to OS X Server Open Directory

I'm trying to bind Windows 2008 SBS server to OS X Open Directory, but the Change domain button is grayed out with this message: Note: The identification of the computer cannot be changed because: - ...
0
votes
1answer
229 views

Setting up Certification Authority on WinServer2003 and configuring IIS SSL

I'm a .net developer and I'm currently working on moving the asp.net project from http to https. I have worked my way through few tutorials and I'm wondering whether I have missed anything out. So ...
0
votes
4answers
2k views

Will Any Popular Root CA Sign a host.domain.local Certificate?

My boss refuses to allow private IP addresses into a public DNS definition. So I am unable to put the private SVN box IP (svn.ourcompany.com) into a .com DNS record. It exists only at ...
9
votes
2answers
973 views

Cost of getting in-house certificate authority trusted

My company has an in-house certificate authority that is currently self-signed. Since we want to start using it for external SSL and secure email to our customers, we need to get it trusted. Does ...
5
votes
3answers
2k views

Pros and Cons of Creating an Internal Cerificate Authority

What are the pros and cons of spinning up an internal certificate authority (primarily Windows 2003 CA)? We have the need to encypt server-server traffic on a project that has 20+ certificates. We ...
1
vote
1answer
1k views

SSL Certifcate Request s2003 DC CA DNS Name not Avaiable

I am trying to submit a request for an SSL certificate on a Domain Controller in order to enable LDAP SSL, and having no end of problems. I am following the information provided at ...
0
votes
1answer
753 views

vpn/Openvpn as a cloud service

I am working on creating a small cloud (any number of EC2 instances that can be deployed based on load) implementing a VPN as a service for the company I'm working for. This is basically a project ...
4
votes
1answer
2k views

Certificate Authority issuing Basic EFS certificates without Autoenroll

We have observed some puzzling behavior from the CAs we have set up in both the past and present. For some reason unknown to us, it seems that our CAs are randomly issuing "Basic EFS" certificates to ...
1
vote
1answer
72 views

Migrating a CA between trusted forests

I know it is possible to migrate a CA between Domains within an Active Directory forest (as per http://technet.microsoft.com/en-us/library/cc742388(WS.10).aspx), but is it possible to migrate a CA ...
2
votes
1answer
729 views

Standalone or Enterprise CA - what do I have?

When you install a Windows forest CA you have the option to make it standalone or enterprise. I have an existing installation which I am assuming is standalone as it doesn't have a certificate ...
0
votes
1answer
195 views

Client Certificate (Authentication) Management Tool / Code, serverbased?

Hello I am currently searching for a possibility to create and manage certificates for client authentication against our webserver (Apache). Currently I have to manage / list all the certificates on a ...
5
votes
3answers
12k views

Can I create my own S/MIME certificate for email encryption?

I'm having a bit of an issue here. Bear with me as this may be a case of "not asking the right question". Background: Using Apple Mail. Want to encrypt/decrypt email but GPGMail (and apparently ...
6
votes
1answer
973 views

Purpose behind subordinate Certificate Authorities

At my place of employment, we are setting up a PKI infrastructure using Microsoft products. We have a totally clean slate here and want to have a good start. We're wondering why anyone would set up ...
0
votes
2answers
910 views

Can you use a public cert to do Radius for EAP?

In other wirds, rather than installing an Enterprise Root CA and having internal PKI. Can I buy a $30 cert from Thawte for example and then use it on my IAS server? Is this not a better and cheaper ...
1
vote
1answer
1k views

Windows 2003 Domain - Certificate Authority - New Automatic Certificate Request

I have an issue with a certificate authority in a windows 2003 domain. We need one configured to allow ssl/tls encrypted traffic over LDAP so that our Application Gateway server is able to allow users ...
0
votes
2answers
857 views

Removing Cert Server from AD

My CA server crashed. It was used to deploy certs to messenger clients for live communication. I am no longer using live communication. I removed the server object from AD but my clients and servers ...
6
votes
8answers
22k views

svn won't accept my invalid certificate

I have a server running apache with a self-signed certificate (the server) with subversion hooked in It requires a username to checkout or update from the repo. I have a checkout from the repo that ...
0
votes
1answer
709 views

CA XCOM Data Transport - XCOMU0474E xcomd is already running. Multiple instances not supported

Does anybody know the problem described below? It's a Red Hat Enterprise Linux running Computer Associates XCOM Data Transport. #/usr/sbin/xcomd 2009/05/18 08:46:48 PRG=xcomd PID=7618 ...