In cryptography, a certificate authority, or certification authority, (CA) is an entity that issues digital certificates.

learn more… | top users | synonyms (1)

6
votes
1answer
28 views

Powershell Remotely Delete PKI Certificates

I recently rebuilt my PKI and I would like to delete the certificates that were issued to all client machines across my network. Sounds like a job for Powershell! So I wrote this script to be ...
2
votes
1answer
254 views

Can't request computer certificate

I am using MMC with the snaping of certificates. I am requesting certificates from a brand new installation of a CA. Requesting User certificates works perfectly. Requesting Computer certificates ...
1
vote
1answer
15 views

ADCS - How can I diagnose the exact reason a certificate request was denied by a policy module?

I need to develop operational procedures to audit and understand why a specific request was rejected by an Active Directory Certificate Services (ADCS) Policy Module. I've attempted turning on all ...
1
vote
1answer
58 views

Windows Server 2008 R2 CA not issuing more than 2 years

I have active directory environment in 2003 R2. I have installed 2008 R2 Enterprise Edition CA. Then I have created custom template from web server template and add expiry date as 15 years. my root ...
1
vote
1answer
141 views

sendmail (Smart Host) authentication with server using certificates

We are trying to prepare a setup with following configuration: We have a Central mail server which acts as a gateway to the internet for our domain. We have some client machines which access ...
1
vote
1answer
187 views

Client side certificates in client browsers with unix server for management

We are currently running Unix dedicated servers for everything (Web cluster, database, FTP, batch, ...) except for a Microsoft Active Directory Certificate Services. The sole purpose of this Windows ...
1
vote
1answer
277 views

Linux Certification Authority signing Windows 2003 Server certificate requests

I've had some success using a Windows 2003 Server running as a Certification Authority signing certificates used in secure communications between Ubuntu Linux and Active Directory on Windows 2003 ...
0
votes
1answer
75 views

Unable to install Certificate Enrolment Policy Web Service

I'm running on Windows 2k8 Enterprise edition, and when adding the Active Directory Certificate Services, I don't see the option to add the Certificate Enrolment Policy Web service in the dialog box. ...
0
votes
1answer
105 views

Windows Xp Autoenrollment Issue

i've trouble to auto enroll for Xp Clients. I setup up an two tier ca on windows 2012 and configured Autoenrollment. So far i just have been testing with Windows 7 Client and i have no issue at all. I ...
0
votes
1answer
45 views

OpenSSL not using CA directory

OpenSSL will not verify a cert $openssl s_client -connect <host>:443 ... Verify return code: 21 (unable to verify the first certificate) However, if we figure out the location of the store $ ...
0
votes
1answer
12 views

What refer/mean “Remote Server Authentication” at Apache mod_ssl doc?

The part of the doc in that such term is used is this. Can anybody give some context or explain me what mean Remote Server Authentication there? I know that Apache server can authenticate clients but ...
0
votes
1answer
653 views

Renewing Service Certificates for NDES on Windows Server 2008 R2

We currently use the NDES Service on Windows 2008 R2 Enterprise where the same box is also the standalone Certificate Authority. During initial setup, NDES created 2 service certificates for SCEP ...
0
votes
1answer
375 views

Generating SAN SSL Certificate that works for firefox and chrome

I am trying to generate a SSL certificate that after being signed by my own CA will work for multiple domains. My openssl configuration file looks like this: [ req ] default_bits = 2048 ...
0
votes
1answer
625 views

How do I manually publish a CRL for a certificate?

I have setup a new server and installed Remote Access and Certificate Authority services so I can configure it as a VPN. I have created my own certificate through http://localhost/certsvr, and have ...
0
votes
1answer
2k views

Create and use intermediate certificate authority on Windows Server 2012?

Background: Server OS is Windows Server 2012. GUI is installed as we come upto speed with powershell. Setup is staging, not production (yet). We have our (internal, domain limited) Root CA installed. ...
0
votes
1answer
40 views

CA is not listed on Autoenrollment dialogs

I've had for a long time a 2003 AD Root CA in the domain and Admins have been able to request certificates to this CA through IIS interface without the need to generate a request file using the Create ...
0
votes
1answer
505 views

How do I create a certificate with HP Systems Management Homepage with Windows 2008 R2

I'd like to get a trusted, or even better a "green bar" certificate from my Windows 2008 R2 CA to work with my Insight manger home page of https://host:2381 I tried importing the file ...
0
votes
1answer
339 views

There is no certificate chain in portal certificate file

I am trying to install Mcafee EMM in a lab environment. I have created an enterprise CA and created a certificate. But while installing the EMM, its showing the error of there is no certificate ...
0
votes
1answer
323 views

Making a CA for RAS and IAS for wifi on Server 2003 Standard

I am working for a small nonprofit with a few servers running 2003 standard. Before you ask, there is no budget for server upgrades unless someone donates money for the task. I am changing over the ...
-1
votes
1answer
71 views

intermediate certificate not sent by WAMP

I have a strange problem that noone can help me with. I will really appreciate any help figuring this out. I have a wamp installation running apache 2.4.4 and latest openssl (which i downloaded and ...
3
votes
0answers
49 views

Windows PKI: How can I import, sign/issue and export a large number of CSRs?

I have a lot of CRS that I need to have signed/issued and exported in windows. I was hoping I could batch process them somehow (certutil sounds like it can do some of the work) but I'm not quite sure ...
1
vote
0answers
21 views

No Certificate Templates in Certification Authority

I have installed AD Certificate Services on a Windows Server 2012 R2 Standard edition. But when I open Certification Authority snap-in, there is no Certificate Templates folder: Why? Have I missed ...
1
vote
0answers
32 views

Exchange on WP7 - 80072F0D

Last week, the self-signed certificate on our Exchange 2010 mailserver expired, so we made a new one. Everything works fine after this, except mail on Windows Phone 7. All phones are giving an error ...
1
vote
0answers
24 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
1
vote
0answers
29 views

EFS file access problems

in my organization, i have a deadline to deploy EFS using AD CS, and i am working with a single windows server 2003 box, which is the Root CA, and is the same server responsible to certificate ...
1
vote
0answers
191 views

ADCS WebEnrollment : The context was acquired as silent

I have setup Active Directory Certificate Services with Web Enrollment and I have the following error when enrolling certificate on other computers that are in the same domain : Certificate ...
1
vote
0answers
462 views

How do I set up an 802.1X infrastructure for use with OS X and iPads?

At my workplace I have been tasked with setting up machine certificate based 802.1X wireless authentication for our Apple devices. It seems like on the client side this will be handled by Profiles ...
1
vote
0answers
416 views

Thunderbird not trusting certificate signed with self-signed authority

I have generated a self-signed certificate authority using mydomain.org as the common name. I imported the public certificate using Thunderbird's certificate manager under the "Authorities" tab. So ...
1
vote
0answers
298 views

The revocation function was unable to check revocation for the certificate

I need to pass IIS certificate authentication on Windows Server 2012. The root cert haven't got any revocation lists but I'm getting exception: The revocation function was unable to check ...
1
vote
0answers
362 views

Sendmail Server Authentication: Certificate based: Error

I have configured my setup for a server certificate based authentication. Both Server and Client are sendmail systems and both have the same set of certificates. However when client communicated ...
1
vote
0answers
107 views

How to properly replace CA certificate when clients get it bundled in PKCS#12 containers?

I'm about to regenerate a certificate of my CA (maintained by OpenSSL) used mostly to provide OpenVPN access to the intranet for my clients. My question is related to this one — "Certification ...
1
vote
0answers
1k views

Certificate enrollment for Local system failed to enroll Event ID:13

I've just finished installing a second domain controller to gain redundancy in the network. (and to solve some issues) After installation and configuring all errors are gone but one that is: Event ...
1
vote
0answers
555 views

OpenVPN without Root-CA

Simple OpenVPN Setup with SSL Authentication. SSL-Setup: Root-CA > Intermediate-CA > Issuing-CA All certificates (vpn-server and -clients) are issued by the "Issuing-CA". I tried to use the ...
1
vote
0answers
410 views

Certreq -retrieve can't find the specified CA

I'm currently writing a Powershell script and have run into a bit of a roadblock. Basically, the script requests, approves, and retrieves new certificates from our CA using certreq.exe and ...
1
vote
0answers
372 views

Change name of Win Server 2008 computer after CA install

I am importing an old certificate database into the new CA on a new server I'm installing. I am warned by Windows that I can't change the computer name, domain settings, etc., after installing the CA. ...
0
votes
0answers
64 views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and ...
0
votes
0answers
41 views

SSL warning appears only to some devices

I have godaddy ssl certificate for domain.There wasn't any problems with my SSL certificate and visiting my domain(Haven't receiveed any errors), but couple times(two weeks ago) when I visited site ...
0
votes
0answers
29 views

no local computer physical store, only registry and smartcard

I'm currently encountering an issue whereby i cannot see the "local computer" physical store, under trusted root CA, when attempting to install a cert. Instead the only stores i see are "Registry" and ...
0
votes
0answers
142 views

Can't seem to get Apache SSL client certificate authentication working with an intermediate CA

I'm restructuring my personal CA system and trying to add an intermediate CA into the mix. I have a self-signed root CA whose certificate is imported into all appropriate browsers/OSes. I seem to be ...
0
votes
0answers
51 views

Update Root CA Certificate values (Country/location(locality)/etc)

Our Offline Root CA server was setup prior to my joining the company and has com as the country code which is invalid for several things that I'm needing to do...primarily to get clients to stop ...
0
votes
0answers
31 views

Windows Server 2008 Certificate Authority setup

Help!!! Our Root CA expired on 2/28/2014 and the original server has been reloaded with an OS. I am in dire need as many of our external sites are now not working - no surprise! I have not ...
0
votes
0answers
32 views

certificate authority service wont start

I have this CA service issue which is not starting hence not issuing any new certificate to my wireless users, when ever we try to start that this comes back with the Bad Key. 0x80090003 (-2146893821) ...
0
votes
0answers
38 views

Auto-enrollment certificate without enroll permission

I am Domain Admin of a company. We implement Active Directory Certificate Services in our company for email signature and encryption. Because we have more than 1000 users in our company, we want to ...
0
votes
0answers
45 views

How to get/build a CA bundle file from a local OpenSSL CA

If I establish a standard OpenSSL CA directory structure and presence (such as by using "CA.sh -newca"), how do I get/build a CA bundle for it? I don't have anything that resembles something like the ...
0
votes
0answers
57 views

override specific DN fields when signing csr

When signing CSR on CA side, how can I override specific DN fields by custom value? I want to ignore what is written in CSR. For example in C= and O= fields and replace them by something static. Other ...
0
votes
0answers
56 views

Installing the Apple Root Certificate Authority on CentOS CLI

I could be barking up the wrong tree here, but I'm looking for help on installing Apple's Root certificate (http://www.apple.com/certificateauthority/) on a CentOS server via the command line - which ...
0
votes
0answers
266 views

How to configure IPSEC for windows server 2012

I am trying to configure an ipsec connection between 2 windows 2012 servers but i have some problems. I am new to windows server configuration so any help will be really appreciated. Lets start with ...
0
votes
0answers
26 views

Local CA for remote web server

I have two domains and the one I am in has a certificate authority server. The domain I am not in doesn't have a CA server. I want to certify https on that server so that I can get there without the ...
0
votes
0answers
54 views

Combining CA's into a single PEM

I have been wondering if it is possible to combine two CA certificates into a single .pem, then use that pem to allow clients with certs signed by either CA to create TLS connections with an LDAP ...
0
votes
0answers
130 views

Error renewing Certificate in Certificate Authority - 2003 Professional Edition

Trying to Reissue a Certificate to an expired certificate authority. I've logged into my Domain Controller, gone to the Certificate Authority and then right-clicked and went to "Renew CA ...