Browse Blog Posts by Tags

All Tags » PKI (RSS)

MVP WordPress Blogs

Browse Blog Posts by Tags

Showing related tags and posts for the Blogs application. See all tags in the site

How to Enable Notifications for Pending Certificate Requests

You can configure a Windows Certification Authority certificate template to require CA certificate manager approval, as shown below. With this configuration autoenrollment is disabled and the CA Manager must approve the certificate request before the...

Posted to The EXPTA {blog} by on Thu, Jul 12 2012
Filed under: Filed under: tip, troubleshooting, certificates, PKI, Windows
Myths #2: PKI edition.

Take notice: My new feed address is now http://feed.feedcat.net/806052 . Please re-subscribe. BTW, did you know what do certificate template options like “Allow private key to be exported” or “Prompt the user during enrollment and require user input when the private key is used” really do? Do...

Posted to IT, IS, etc... by KomatoZo on Thu, Jun 21 2012
Filed under: Filed under: Security, PKI, Myths
DNS Server service refuse name resolution on Windows Server 2008 R2

It has been already from nearly two years ago, that under certain circumstances DNS Server service on Windows Server 2008 R2 refuse to resolve internet domain name addresses. This issue occurs if Windows Server 2008 R2 DNS Server is used without forwarders configured, just relying on root hints entries...

Posted to WSSRA by Thomas K.H. Bittner on Fri, Jan 6 2012
Filed under: Filed under: General, Exchange, Windows Server, SharePoint, TMG, UAG, Remote Desktop Services, ISA Server, Hosting, Microsoft Online Services, Microsoft Provisioning Services, WSUS, UM, OCS, Active Directory, PKI, Forefront, Network Services, Outlook, DNS, Windows Client, Security, Windows Live Essentials, Internet Explorer, IIS, SonicWall
Microsoft Update for compromised CAs [Update]

Microsoft published a new Microsoft Update for Certificates. After several CA hacks during the last days, this update should be installed asap. http://support.microsoft.com/kb/2607712 This update is currently not available on Microsoft Update or Windows Update, so you need to perform the update manually...

Posted to WSSRA by Thomas K.H. Bittner on Wed, Sep 7 2011
Filed under: Filed under: General, WSUS, PKI, Certificate Service, Security
Secure Access to your Cloud Services

Moving to the Cloud is going on and so we will have more and more On-Premise and Cloud environments living site by site. Securing access to Cloud Services will be more relevant for the future. A great article on this topic has been published by Yuri Diogenes, Senior Security Support Escalation Engineer...

Posted to WSSRA by Thomas K.H. Bittner on Tue, Feb 22 2011
Filed under: Filed under: General, SQL, Storage, Exchange, Windows Server, Hyper-V, SharePoint, Mobile, System Center, SCVMM, DirectAccess, TMG, ISA Server, Hosting, Microsoft Online Services, Managed Services, Microsoft Provisioning Services, Office, UM, OCS, Migration, PKI, Certificate Service, Forefront, Virtualization, Network Services, File Services, Outlook, High Availability, Business Intelligence, Dynamics, CRM, DNS, Windows Client, BizTalk, Security, SCOM, SCCM, SCMDM, Cloud Computing, Dynamic Computing, Internet Explorer
Creating self-signed certificate for code-signing

Just in case you cannot google it or you don’t like solutions longer then two strings of command line… Sometimes you need to assure yourself that scripts or code you are about to run are the same as you’ve created them. One of the ways to achieve it is to put a flash drive with them into a safe. Another...

Posted to IT, IS, etc... by KomatoZo on Thu, Jan 13 2011
Filed under: Filed under: PKI, Tips'N'Tricks
Running, Filtering and Saving Scans in Best Practise Analyzer

Who knows the Best Practise Analyzer for Exchange (ExBPA) is already familiar exporting scan results to other file formats to save or achive. The Best Practise Analyzer (BPA) coming with Windows Server 2008 R2 Server Roles doesn’t have this opportunity to save the scan reports form the Server Manager...

Posted to WSSRA by Thomas K.H. Bittner on Sat, Sep 25 2010
Filed under: Filed under: General, Storage, Exchange, Windows Server, Cluster, Hyper-V, Remote Desktop Services, ISA Server, Tools, Active Directory, PKI, Certificate Service, Forefront, Network Services, File Services, BPA, DNS, DFS, Security
How to Create Certificates with a Longer Validity Period

So, you have your own Windows Certificate of Authority (CA) server and you want to create some new certificates that are valid longer than the default certificate templates. You duplicate the User Certificate, and set the validity period to 5 years. You...

Posted to The EXPTA {blog} by on Fri, Aug 27 2010
Filed under: Filed under: tip, troubleshooting, Security, certificates, PKI
How to Request a Certificate with a custom Subject Alternative Name

Today many servers require some sort of SSL certificate to be deployed and in many cases custom names are involved. So you need SAN certificates when you deploy Exchange 2007 or 2010 and it is a good choice to use SAN certificate when you use ISA Server 2006 and Forefront UAG or TMG 2010. Remeber, that...

Posted to WSSRA by Thomas K.H. Bittner on Fri, Apr 23 2010
Filed under: Filed under: Exchange, DirectAccess, TMG, UAG, Remote Desktop Services, ISA Server, PKI, Certificate Service, Forefront
Windows Server 2008 R2 Enterprise and Standalone CA Migration Guide

The Windows Server 2008 R2 Active Directory Certificate Service Migration Guide is now available at http://technet.microsoft.com/en-us/library/ee126170(WS.10).aspx . The guide describes the necessary steps for a successful migration of both enterprise and standalone CAs to Windows Server 2008 R2 from...

Posted to WSSRA by Thomas K.H. Bittner on Sat, Mar 20 2010
Filed under: Filed under: General, Windows Server, Migration, Active Directory, PKI, Certificate Service
Why my SSL connection doesn’t work?

It is a very frequent question, which, nevertheless, lead to the same answer: the SSL certificate has to be issued for the same name which a connection is being established. For example: if your certificate is issued for www.domain.com , then every connection to the site by aliases like www1.domain.com...

Posted to IT, IS, etc... by KomatoZo on Mon, Apr 9 2007
Filed under: Filed under: PKI, Tips'N'Tricks
IE7 & SSL

I’ve received a question through the Russian TechNet Forums, answer to which is to be widespread. The fact is that the CRL checking process has been change in IE7 in case CRL is not reachable. While IE6 shows the warning in that case, IE7 by default doesn’t show anything. It is easy to think up the situation...

Posted to IT, IS, etc... by KomatoZo on Thu, Apr 5 2007
Filed under: Filed under: Security, PKI, SSL, IE, Tips'N'Tricks

Page 1 of 1 (12 items)

Questions? Contact Susan at Susan-at-msmvps.com. Each post's copyright held by the original author. All rights reserved. Blog site is an independent site not sponsored by Microsoft.
Our servers would like to thank www.ownwebnow.com and www.exchangedefender.com. We wouldn't be here without the generosity of Vlad Mazek and his companies.

Powered by Community Server (Commercial Edition), by Telligent Systems

Theme based on the Paperclip Blog Theme included in Community Server.
Enhanced to a Site-Wide Theme by Interscape Technologies.