Root certificate export
Our organization has an internal domain with a PKI consisting of a single 2003 Server Enterprise Certificate Authority. About six months ago, I renewed our root certificate (512 key length) to 2048 key...
View ArticleFailure reasons eg: 2313 in ID 4625
HelloDo You have the list with descr of failure reasons eg. %%2313, %%2307... I've searched Net and nothing.. :(Mainly I see it in ID 4625.Thank you in advance for your help!Damiano
View ArticleRoot and Issuing Cert Enrolment
I have a 2012 2 tier PKI environment. Offline root CA and 4 Enterprise Issuing CA's. The offline root CA has been published to AD, the enterprise issuing CA's are in AD by virtue of being enterprise...
View ArticleConstrained delegation for EFS sharing
HiIn Windwos 2003 server (in a 2003 domain) with a shared EFS folder to allow 5 XP clients to encrypt and decrypt files on the Windows 2003 server shared folder.Right click on the server computer...
View ArticleCA server issue: "The revocation function was unable to check revocation...
My expertise with regards to Certificate Services is limited so bear with me please... I inherited a network with a single domain that has an Offline Root CA along with the online issuing CA. I first...
View ArticleServer computer certificate
Hello,I have installed a Windows 2012 standard server called VHOST1 to run HyperV. In the Trusted Root Certificate Authorities container there was a certificate calledVHOST1 which I presume was created...
View ArticleIssuing Printer Certificates
Hey,I've rolled out port security for windows workstations and now I'm working on other devices, primarily Lexmark printers (using Certificates). Can someone explain to how I can issue a certificate to...
View ArticleSoftware Restriction Policy batch vs vbs
Hi there,I have recently implemented a Software Restriction Policy on a Computer level with Disallowed level as default.I whitelisted the \\mydomain\SysVol so that my Group Policies could run.I have a...
View ArticleHow to completely disable bitlocker (server 2008)
I want to permanently disable or remove bitlocker from a server. With Bitlocker on, the system requires boot password each time it boots. However, this is means autoupdates that autoreboot the server...
View ArticleClik here to view.
IPSec Main mode 4653 Audit failure from IP addresss : Akamai and Microsoft...
I am updating my security log settings and testing some of the Advanced Logging features.I have IPsec NPS on the network, so I am interested in any IPsec failures.On my domain controllers I am getting...
View ArticleConfigure RADIUS
Hello,I have previously posted this question in a different forum, but I was advised to redirect my query here. please see the link below to see the existing...
View ArticleCannot write to Event Log from asp.net on Windows Server 2012 AZURE VM
I found this post...
View ArticleHow can I create digital signatures for my users using Windows 2008 Active...
Hi,I need to create local digital signatures for my users. How can I do that using W2k8 Active Directory Certificate Services? We are gonna sign Office 2010 documents.What company offers cheap digital...
View ArticleTemplate changes in 2008, R2 and 2012+
Hi All;Can any one point me to good article where I can read about the Template changes in 2008, R2 and 2012+ .
View ArticleChoosing CSP versus KSP
Hi All,Can some one point me to a good article which explains about Choosing CSP versus KSP.
View ArticleSecurtiy Bulletins for 2012 server
Hi,We are planning to deploy a new 2012 server and also we've existing 2000,2003 & 2008 servers. For these servers has updated with below security bulletins. And whether the fixes to these...
View ArticleADCS Migration "encountered an error"
Hi all,I encountered a problem to migrate my ADCS standalone Root CA (Server 208) to a destination Server 2012 Standard I am following this giude:...
View ArticleClik here to view.
Bitlocker Not Unlocking Drives Every Time
I have backups scheduled for our server (every day at 6PM) to an X: and Y: external usb drive running bitlocker. Sometimes when I plug in either the X: or Y: drive, it doesn't automatically unlock...
View ArticleDuplicated Certificate Template not showing under New Template to Issue menu.
Can someone please help me with the following issue. I believe I may have a handle on the cause of the issue but not 100% sure and therefore would value some advice please.I have a single Active...
View ArticleCA Clusters
With Windows Server 2012 or 2012 R2, is it possible to create a CA cluster at the main location with two nodes (Active/passive) and place a third node at a remote location for site failover? I seem to...
View Article