3
votes
Accepted
How to create an Authenticode Signing infrastructure?
You are not really mistaken, just don't know all the details. In short, code signing trust in .NET is divided in 4 levels:
Untrusted. The signature was created by an explicitly distrusted publisher. ...
- 7,117
2
votes
Accepted
Specifying Dynamic filenames for AIA and CDP in CAPolicy?
In the "CAPolicy.inf" file where you define [AuthorityInformationAccess] and [CRLDistributionPoint], can these sections use dynamic values?
these sections in CAPolicy.inf file are ...
- 7,117
2
votes
Why does Active Directory Certificate Services require Remote Registry Service?
It is necessary for AD CS remote administration. CA stores its configuration in registry.
- 7,117
2
votes
How to reenroll certificate on behalf of someone else? Windows Certification Authority
Renewal on behalf of doesn't natively exist in AD CS architecture. The idea is that you perform initial certificate enrollment on behalf of using enrollment agent certificate as co-signer, then ...
- 7,117
1
vote
SSH known_hosts entry for port number and tunneling using @cert-authority
Rather late to the game (5 years after the question), but I ran into this problem myself today and thought I'd document this for others running into it too. The answer is short, but the hints to it ...
Only top scored, non community-wiki answers of a minimum length are eligible