PKI setup query
Hi,I am setting up a PKI infrastructure. I have noticed that my hostname is XYZ but the ISSUER of a certificate has a different name (root ca)#Is this an issue?
View Article(Certificate) AIA Location - unable to download
For one of my clients I am setting up certificate services for them. I have a standalone offline root certificate server and an enterprise active directory integrated subordinate. Within the...
View ArticleADCS and RDS
HelloWe've built an RDS farm using RD Web and RD Gateway. We've applied a public wildcard certificate to the external facing components RD Gateway and RD Web.From my understanding to allow SSO to...
View ArticleStore passwords in reversible encryption??
I may be missing something when you consider the option to store passwords with reversiable encryption but isnt encrypted data meant to be reversible provided you have the right key and hashing is mena...
View Articlebitlocker network unlock TPM
BitLocker Network Unlock requires theTPM module to start the computerwithout entering aPIN code?
View ArticleSetup of Multiple Issuing CA's
There are lots of comments regarding the use of multiple Issuing CA's in an ADCS infrastructure, even comments about you need multiple Issuing CA's with Server 2003 to achieve resiliency. However,...
View ArticleHow to perform cmc requests for key recovery with non domain joined machines?
Is it possible to use the key recovery agent feature in windows for non domain joined machines?If I create a cmc certificate request with a non domain joined machine - it results in an error on the...
View ArticleWhat is the point of importing .adm file to another windows operating system...
I imported inters.adm file from windows xp to windows 7, however when I open the classic ADM folder in windows 7 after imported from windows xp and then made some changes to the inters.adm file in GPO...
View ArticleWiFi with EAP-TLS (DC, CA and NPS server) not working
Hi techs, I'm trying to set up a lab for a wifi protected by eap-tls. The goal is to get wireless devices (laptop, playbook, BB10) authenticated on the wifi using certificates (only). Current status is...
View ArticleBitlocker Can't enumerate, associated data is missing
Hello!I'm having an issue trying to activate Bitlocker on a 3TB drive. No matter how I format (exFAT, NTFS), separate into separate partitions (512MB + 2.79GB // single partition), or attach the drive...
View ArticleVPN with RAS and multiple subnets
We are testing Microsoft RAS for VPN connectivity to replace our old Cisco VPN. So far everything is working as we hoped and we are looking at one final piece that has us stumped.Server is a VM with...
View ArticleSPN settings for CA web enrollment ? (errors while requesting for a certificate)
Hi, I have configured CA web enrollment according to the guide at http://blogs.technet.com/b/askds/archive/2009/04/22/how-to-configure-the-windows-server-2008-ca-web-enrollment-proxy.aspxMy...
View ArticleHow to mobilize a renewed wildcard certificate in IIS6 on Windows 2003
Note: We raised the following in the General Forum but were advised to repeat it here…Q1. This question relates to wildcard certificate renewal and how to bring the renewed wildcard certificate into...
View ArticleEnterprise CA Root Certificate not valid
Hello,My Windows Server 2003 machine tells me that my CA root certificate is invalid : certificate has a nonvalid digital signature. The certificate was issued from my Enterprise CA server (a Windows...
View ArticleThis question is on ADFS
We are getting this message in our logs when our Claims provider tries to connect:Microsoft.IdentityServer.Web.UnsupportedSamlResponseException: MSIS7030: SAML response must contain exactly one...
View ArticleChanging PC's with Auto Enrolment enabled
Hi, I have user based auto enrolment enabled via GPO. We are rolling out new laptops and the user cert inst being delivered to the user's cert store on the new laptop. Is this by design and I will...
View ArticleHow to fix user AD account
Is there a way to repair a users active directory account. I wanted to avoid having to delete the AD account and email account associated.This account have some security issues, user don't receive AD...
View ArticleHow to Repair user AD account.
Is there a way to repair a users active directory account. I wanted to avoid having to delete the AD account and email account associated.This account have some security issues, user don't receive AD...
View ArticleAD certifcates store for Credential Roaming
Hi, I need to know if there is a folder that users roam certificates are hosted in the AD. Can I see them in the AD and can I manage them? Thank you!
View ArticleServer Rights Issue
I have a Windows 2012 Standard server installed on our domain. A group called domain admins is listed in the Administrators local group on the server.If I login as one person in the Domain Admins...
View Article