In cryptography, a certificate authority, or certification authority, (CA) is an entity that issues digital certificates.

learn more… | top users | synonyms (1)

0
votes
1answer
5k views

How can I get SBS2011 to issue certificates?

I want to use certificates to authenticate both client and server for a new internal service. Since all our servers already have the SBS (2011 Standard) server's Cert installed as a Trusted Root, ...
7
votes
3answers
2k views

Outlook Encrypted Emails boo boo

I just reinstalled my Windows OS 7 and forgot to backup my Email Certificate for Outlook 2010 beforehand. Now I can't read any encrypted emails. When I try, it says "Cannot open this item. Your ...
0
votes
1answer
41 views

CA is not listed on Autoenrollment dialogs

I've had for a long time a 2003 AD Root CA in the domain and Admins have been able to request certificates to this CA through IIS interface without the need to generate a request file using the Create ...
1
vote
0answers
2k views

Certificate enrollment for Local system failed to enroll Event ID:13

I've just finished installing a second domain controller to gain redundancy in the network. (and to solve some issues) After installation and configuring all errors are gone but one that is: Event ...
2
votes
1answer
1k views

Slow starting Domain Controller after installing Enterprise Certificate Authority in Windows 2008 R2

Because I want to test SSL in the local domain I've installed Enterprise Certificate Authority with the use of this tutorial. The Install went successful and after install I rebooted the DC. While ...
3
votes
2answers
4k views

Configuring client certificate authentication in apache

I am trying to set up part of a Virtualhost in apache to require client authentication. The VirtualHost in question also acts as a reverse proxy for the actual web server. Here's what I have done: ...
4
votes
1answer
1k views

Windows 2003 x32 CA to Windows 2008 x64 CA migration

In the following period I have to migrate the AD over to 2008 schema level. I currently have a x64 Windows 2008 R2 domain controller and one x32 Windows Server 2003 domain controller. The x32 server ...
1
vote
0answers
843 views

OpenVPN without Root-CA

Simple OpenVPN Setup with SSL Authentication. SSL-Setup: Root-CA > Intermediate-CA > Issuing-CA All certificates (vpn-server and -clients) are issued by the "Issuing-CA". I tried to use the ...
1
vote
1answer
275 views

How to extract CRL location from x509 certificate using OpenSSL utility

I need to extract the crl location from a certificate authority so I can use that in verifying certificates. Is this possible using the openssl utility other than using the -text option and attempting ...
1
vote
1answer
3k views

Microsoft Standalone CA - Set expiration date of an individual request

I have set up a Microsoft Standalone CA on 2008 R2 as a root CA. I'm trying to setup a subordinate Enterprise CA. I generated the certificate request, and submitted it to the root CA. Then, I ran ...
1
vote
1answer
332 views

Decommissioning PKI - How do I set a CRL Next update to null?

I am planning on deploying two Windows 2008R2 PKIs: One for legacy devices that don't support SHA-2 / ECP and another one that does support it. When the time comes to decommission the SHA1 ...
4
votes
1answer
504 views

How large is the certificate OCSP and CRL cache in my Windows server?

How can I see the size of the in-memory OCSP cache to a CRL cache in my Domain Controllers? In other words, most Windows process that uses CryptoAPIs have an in-memory cache of every CRL and OCSP ...
15
votes
5answers
21k views

How to update cURL CA bundle on RedHat?

I am running into issues where the CA bundle that has been bundled with my version of cURL is outdated. curl: (60) SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL ...
1
vote
1answer
765 views

Domain Environment + Certificate Authority + Server 2008 R2

I have recently been delegated the task to setup a CA in our domain environment and have a question on why Microsoft does somethings the way they do lol. I have been trying to read up on what the ...
0
votes
1answer
504 views

Self-signed Certificate ( Makecert.exe or CA )

I have configure PowerShell Execution policy on Server as AllSigned, so i want to create a certificate for signing a ps1 script. Can you guide me, which Certificate Should i use? I want to used ...
2
votes
1answer
434 views

Can't request computer certificate

I am using MMC with the snaping of certificates. I am requesting certificates from a brand new installation of a CA. Requesting User certificates works perfectly. Requesting Computer certificates ...
1
vote
1answer
82 views

Broad SSL questions about certificates, domains & servers

I've only done basic stuff with signed certificates (basically follow the instructions from CA). I have general questions moving forward that I hope someone can answer. There are so many different ...
1
vote
3answers
2k views

How can an OpenVPN server be setup to use multiple certificates?

The OpenVPN documentation sets up a single certificate from a single CA to be used for all clients. Is there a way to set the server to enable multiple certificates from different CAs so long as the ...
8
votes
1answer
1k views

Deploy internal CA to linux clients

I have a large number of workstations that run RedHat Enterprise Linux 5 and 6. I'd like to deploy our new internal CA (Active Directory) to these machines. I can manually import the certificate ...
2
votes
2answers
3k views

How do I manually authenticate a CA signed SSL certificate

A service I am using is refreshing their SSL certificate and now my connections to their service fail. They were working before the change (as in, 1 hour before the change). Their old and new server ...
2
votes
1answer
4k views

How do I configure Remote Desktop Session Host Server to use 3rd party CA and certificates?

I'm trying to harden our RDP service so we can use a specific server without having to VPN into our network. I would like the RDP Session Host Server to use certificates from an authorized certificate ...
1
vote
1answer
521 views

Using Microsoft CA to create TLS key/cert for Postfix

I'm trying to configure a postfix mailserver to use TLS encryption for SMTP (and IMAP with dovecot, but I haven't gotten to that point yet). It's running on a Fedora 14 machine and I'm using webmin to ...
1
vote
1answer
66 views

Windows Server 2003: Taking Root and Intermediate CA's offline causers faiure in Enterprise CA

I installed 3 CA's in lab environment: SA Root CA SA Intermediate CA Enterprise CA (also DC) The instructor recommends taking Root and Intermediate CA's offline once the Enterprise CA has been ...
1
vote
2answers
2k views

How do you change the cert template that IIS 7.5 uses automatically when you choose to “Create Domain Certificate”

In IIS, there is an option to "Create Domain Certificate." This works great except for one problem. The template that this process uses is the "Web Server" template in the CA which has a key with ...
3
votes
2answers
226 views

“Countersigning” a CA with openssl

I'm pretty used to creating the PKI used for x509 authentication for whatever reason, SSL Client Verification being the main reason for doing it. I've just started to dabble with OpenVPN (Which I ...
3
votes
1answer
352 views

Requiring client certificate issued by a specific intermediate CA in Apache

I have a CA hierarchy like this: Root-CA ________|_____________ | | TEST-CA PRODUCTION-CA _____|_____ ...
1
vote
1answer
279 views

Issuing client certificates to customers

What's the best approach for issuing client certificates to customers? Should we run our own certificate services (we're on Win 2008 R2), and issue them that way? Is there a CA that will issue them ...
2
votes
1answer
65 views

Server 2008DC Replication issues with 2003DC

Still have an ongoing replication issue on my network. Long story short: Existing 2003 Domain (2003 Level). Added a new 2008R2 server. Did the usual Adprep/forestprep steps as required. Transferred ...
3
votes
1answer
1k views

Automatically create Subject Alternate Name (SAN) Certificates

We are running an enterprise CA on Windows 2008R2. I just did an update to windows 7 on my workstation. Now every time I connect to a remote server using rdp I get a warning stating that the ...
2
votes
1answer
161 views

SSL Handshake, Cannot Pinpoint Problem

When attemting to communicate with an Alfresco Server to perform a file upload the client receives the following error in their logs. SSLPeerUnverifiedException: Indicates that the peer's ...
2
votes
1answer
1k views

openssl req sets wrong “not after” date (overflow bug?)

I tried to gernerate my own root CA with a validity of 40 years as follow: openssl req -new -newkey rsa:4096 -x509 -days 10950 -extensions v3_ca -keyout myca.key -out myca.crt -config ...
1
vote
1answer
340 views

Windows Server 2008 R2 Certification Authority into 2003 Domain

Is it supported to install a Certification Authority service on a Windows Server 2008 R2 joined on a 2003 native functional level domain?
3
votes
2answers
4k views

Cannot issue Computer cert to standalone computer from my ECA

All Windows 2K8R2 SP1 environment. I have a working Enterprise Certificate Authority in my domain. I want to issue a Computer certificate (for Server Authentication purpose) to an external, ...
2
votes
1answer
662 views

Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo? or Is StartCom better? [closed]

Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo. The site says: Our promise to you: There is absolutely no cost or commitment for your SSL certificate. ...
1
vote
1answer
482 views

powershell and remote signing

I've created a power shell script to run on start-up but its not working. I've never run a script through group policy so i don't know what the restrictions/best practices are. I've been told i need ...
2
votes
1answer
225 views

How do I set up my own CA for certs and begin importing it in my Computers and/or browsers

I'd like to set up my own Certificate Authority to sign things that are only used internally. Does anyone have any steps they've used to set up their own CA and begin signing certs. I'd also like to ...
2
votes
1answer
3k views

Sign an OpenSSL .CSR with Microsoft Certificate Authority

I'm in the process of building a Debian FreeRadius server that does 802.1x authentication for domain members. I would like to sign my radius server's SSL certificate (used for EAP-TLS) and leverage ...
1
vote
1answer
832 views

Simple CA web interface for SSL certificates tracking/request/generation

I am using the nice XCA packge on my WS to generate and track the keys and CSRs we submit to various CAs, track the certificates we get back from then and to manage the full lifecycle of other ...
2
votes
1answer
689 views

How long can a Microsoft Server CA be down before a cert will fail?

We are using self-signed certificates for internal development machines and other internal connection encryption. The certificates were created using Microsoft Certificate Server. I need to move ...
1
vote
1answer
402 views

Why do I get certificate error when connecting to “trusted PEAP server?”

I'm trying to connect Windows 7 machine to my wireless network secured with WPA2-Enterprise PEAP. PEAP uses server authentication so I have created root CA named FesbCA on my Windows server 2008 R2 ...
2
votes
1answer
658 views

Windows 7 Pro Remote Desktop, improper client-side Certificate warning

I have a standard Windows 7 Pro x64 workstation which has Remote Desktop enabled, the workstation is part of a domain (Samba3, so NT4 style). I have followed these instructions to my success, the ...
0
votes
1answer
240 views

Free OCSP server

I can't have OCSP with my current OS licensing (2008 R2 Standard) but I need this option. I'm hoping to avoid shelling out an additional $2300. Are there any open source products that could act as ...
-1
votes
1answer
707 views

How can i import CA certificates to my Linux server(Archlinux)? [closed]

i can only connect my server by ssh,none web browser and other GUI tools.
1
vote
1answer
1k views

RDP Certificate Distribution Points

I am receiving the message "Your computer can't connect to the remote computer because the Remote Desktop Gateway's server's certificate has expired or has been revoked" when trying to access a TS ...
2
votes
3answers
6k views

apache Client Certificate Authentication errors: Certificate Verification: Error (18): self signed certificate

So I have been following instructions on setting up Client Certificate Authentication in Apache2 w/ mod_ssl. This is solely for the purpose of testing an application against CAA, not for any sort of ...
2
votes
1answer
1k views

Why might Windows falsely claim a self-signed root CA certificate is revoked?

I created a self-signed root CA cert for internal test use, using openssl. This has been successfully installed and used as a trusted CA on a number of machines and platforms (Windows, Linux, various ...
1
vote
1answer
800 views

How do I create a certificate with HP Systems Management Homepage with Windows 2008 R2

I'd like to get a trusted, or even better a "green bar" certificate from my Windows 2008 R2 CA to work with my Insight manger home page of https://host:2381 I tried importing the file ...
2
votes
1answer
413 views

Migrating from a standalone to enterprise CA

I want a peaceful transition from an old standalone CA into an enterprise CA. I am intending to offline the server on completion of this process. My thought process is to publish a CRL with a long ...
0
votes
1answer
181 views

Offline root CA - LDAP distribution point

What benefit is there in using the LDAP distribution point for an offline CA versus using only HTTP? It sounds like the process would be much simpler to use the HTTP distribution point only. I've ...
1
vote
2answers
806 views

Are code signing certificates automatically trusted across the domain if the root CA is trusted?

We have a Microsoft enterprise certificate authority, and I would like to start issuing a few code signing certificates. But what I'm unsure of is this: since all our domain/forest machines trust the ...