Showing posts with label public key infrastructure. Show all posts
Showing posts with label public key infrastructure. Show all posts
Thursday, May 8, 2014

Verify Domain Controller Certificate for Smartcard Logon

›
To enable user smartcard logon, all domain controllers must be enrolled with KDC enabled certificates. The correct cert template to deploy i...
Monday, September 16, 2013

Cert template of Issuing CA must be updated on Account Forest

›
Previously, we did a successful trial on cross-forest cert enrollment  with 2-way forest trust enabled. The user objects are on Account Fore...
4 comments:
Wednesday, July 24, 2013

Delegate Certificate Template Management

›
By default, only Domain Admins are able to create and manage Certificate Templates on the Active Directory. To delegate to other groups (e.g...
Thursday, July 18, 2013

Cert Template MMC Crashed on WS2012 whenever Key Archival was enabled

›
Cert Template MMC (CertTmpl.msc) on WS2012 crashed whenever the archive key check-box was enabled as shown in red box below. A technica...
Wednesday, July 18, 2012

How to share EFS encrypted file

›
It's pretty straightforward to encrypt a file on local drives. All you need to do is to right-click on the "Properties" ->...
1 comment:
Wednesday, June 20, 2012

Implementing NAP with 802.1x enforcement

›
In my earlier post, I've configured 802.1x with EAP-TLS. Now, I'm expanding the effort to Network Access Protection (NAP) with 802....
1 comment:
Tuesday, June 12, 2012

A certificate could not be found that can be use with this EAP when configuring 802.1x on NPS

›
I was running the default 802.1x wizard to configure a new RADIUS server on Windows Server 2008 R2. I had an error that prompt " A cer...
2 comments:
Wednesday, September 14, 2011

Enrolling SSL Cert for DELL iDRAC6

›
Dell's integrated light-out (ILO) management iDRAC6 allows administrators to manage servers remotely (using Java-based virtual console),...
Sunday, June 26, 2011

Credential Roaming

›
Credential Roaming (CR) is especially useful in situations whereby the following 2 conditions exist: (1) user certificate auto-enrollment...
1 comment:
Thursday, June 16, 2011

Cert Enrollment Failed after CA Cert Renewal with Event ID 93

›
After I renewed my CA cert, all cert enrollment failed with error messages saying that the user does not have the permission to read the cer...
1 comment:
Sunday, February 27, 2011

BitLocker with TPM and Cert - Brief Introduction

›
BitLocker is introduced on Windows Vista and Server 2008 to guard against theft of sensitive drives and cold boot attacks. In Windows 7 and ...
Thursday, December 30, 2010

Publish Offline Certificates and CRLs to Active Directory

›
This is refering to step 2 and 3 of the earlier post . Before publishing the Root CA cert, check the extensions on the Root CA server, esp o...
6 comments:

Setting up Two-Tier Enterprise PKI

›
We are setting up a 2-tier CA for our enterprise PKI. The first tier is a standalone CA that should be kept offline while the second tier i...
3 comments:
Sunday, August 1, 2010

Part 2: How DNSSec works

›
This is the 2nd part of DNSSec. The 1st part introduce the prologue to DNSSec . Overview At the most basic level, DNSSEC provides the assu...
2 comments:
Monday, January 4, 2010

Enrollment Agent

›
To be able to request a certificate on behalf of other users and computers, you need an enrollment agent certificate. In Windows 2008, you c...
1 comment: