Use an existing certificate (we already own) on a Exchange server
This has to do with certificates and email - so I'm uncertain whether it should go in the security section (here) or in one ofthe Exchange forums... (?)Anyway, here we go...Usually I create a...
View ArticleSubmitting automated certificate requests to a Microsoft PKI from a Linux...
I'm interested in submitting certificate requests to a CA automatically from a Linux machine (so web enrollment pages are not an option here), to get something similar to certificates autoenrollment...
View ArticleCan you configure a static port to use with certsrv.msc?
I am trying to use certsrv.msc to connect from my workstation to the CA for administration purposes. Workstation is Win7, CA is 2008 R2 Enterprise running Enterprise Subordinate on a dedicated box.I...
View ArticleCreate development CA environment using production CA data
Hello,We need a test bed for Certificate Services in development. We have a development forest with a different name than production. We backed up the data on the subordinate CA in production...
View Articleldaps not working
Hello everyone, i have a domain (contoso.local) which has a CA. I have another domain (no trust or relationship to contoso.local) called cosco.local. im trying to get ldaps working. i created a crt...
View ArticleUsing code signing certificate results in classnotfoundexception
We are running a certificate authority on windows 2012. Our programming section developed a java application on linux and wanted to code sign it. They created a csr and sent it to me. I created a...
View ArticleIPsec default exemptions for Server 2008 R2
Hello Everyone, We are using IPsec in our domain environment all servers are windows server 2003 and 2003 R2. Now we are upgrading to server 2008 R2. With Windows server 2003 and 2003 R2 we used exempt...
View ArticleFull control for system administrators
Hi I understand that system administrators are given full control to all files/ folders of the local disk drives, network drives for daily IT operation. Because my firm has some sensitive information...
View ArticlePassword reset customization
We are running 2008 R2 Active Directory, staff log in to Windows machines on the domain so we have no issues with password reset settings there.The issue we have is that we have students logging in...
View Articleproblem with security template
HI I'm newbie in Windows server 2008 R2I havecreatedatemplatethat enable"password must have complex requirement",in My domain I have disable complex passwordwhen I use"...
View ArticleRobocopy not copying permissions for non-inherited parent folder
HiWE have a folder structure that we want to copy with robocopy. The parent folder in the structure is set to not inherit its permissions. It has custom security permissions and all the folders within...
View ArticleImport a CA-certificate into issuing Enterprise CA error
Hello, I am deploying two-tier hierarchy (Root CA - Standalone Root, Issuing CA - Enterprise CA on Active Directory).Root CA CAPolicy.inf [Version] Signature= "$Windows NT$" [certsrv_server]...
View ArticleHow to migrate win2003 Root CA to win2008R2 .
We use win2003 Root CA for private CA.We plan to migrate that CA to win2008R2.Is there any migration reference document ?
View ArticleExtend validity period of Workstation Authentication certificates
Hi!We are running a CA on Windows server 2008 and have been using a duplicate of the template Workstation Authentication to issue certificates with a validity period of two years. Now we like to change...
View ArticleEvent 1101 :"Audit events have been dropped by the transport. 0" windows 7
My laptop with windows 7 was running just fine till two days ago. It started freezing when I was browsing the web (complete freeze, no response to mouse movement, no Ctrl+Alt+Del response). I had to...
View Articlecertreq -policy Changing signing algorithm
We are trying to create a qualified subordination CSR using a SHA256 signature, however the request keeps coming back as being signed using SHA1. We would like the signature to be SHA-256 for the CSR,...
View ArticleAntivirus Software for server 2008
I would like to know what is the best server antivirus going around as per your view.
View ArticleCertificate Renewal protected by HSM doubt
We have to set up a new CA using HSM(Hardware Security Module) system, and I need to reissue the CA certificate with thesame key pair. To me it looks like a straight forward process from Microsoft....
View ArticleAdd-KDSRootKey fails with "Request not supported" error
I'm trying to create a group Managed Service Account (gmsa) on a newly installed Win2012 DC (first computer on domain). Creating the gMSA requires you to first create a KDS Root Key. I launch the...
View ArticlePKI view , AIA and CDP locatiion for the RootCA has red crossover " unable to...
I am trying to create a PKI infrastructure on winserver2008R2 enterprise as followsoffline ROOT CA---StandaloneOnline Intermediate CA -- enterprise PROBLEM: on the intermediate CA: using enterprise PKI...
View Article