The Curious Engineer

All blogs / Security

Windows PKI blog

learn.microsoft.com/en-us/archive/blogs/pki

News and information for public key infrastructure (PKI) and Active Directory Certificate Services (AD CS) professionals

SecurityMicrosoft blogsMSDN archive

’10’15’20’25
Posts
135 from 30 Nov 2006 to 12 Dec 2018
Posting
archived, read-only
Kind
company blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/pki/feed.xml

2018 2

  1. Sample Code: End-to-End Certificate Transparency requests on ADCS CA
  2. How will Certificate Transparency affect existing Active Directory Certificate Services environments?

2017 1

  1. [CrossPost ] HTTPS Inspection and your PKI

2016 1

  1. How to write an NDES policy module

2015 3

  1. [CrossPost] SHA1 Deprecation Policy
  2. [CrossPost] Implementing SHA-2 in Active Directory Certificate Services
  3. Setting up NDES using a Group Managed Service Account (gMSA)

2014 7

  1. Setting up TPM protected certificates using a Microsoft Certificate Authority - Part 3: Key Attestation
  2. Setting up TPM protected certificates using a Microsoft Certificate Authority - Part 2: Virtual Smart Cards
  3. Setting up TPM protected certificates using a Microsoft Certificate Authority - Part 1: Microsoft Platform Crypto Provider
  4. Windows Server 2012 R2/IIS8.5 - Automatic Rebind of Renewed Certificates
  5. Constraints: what they are and how they’re used
  6. A novel method in IE11 for dealing with fraudulent digital certificates
  7. [CrossPost] Microsoft PKI OCSP Responder Now JITC Certified and Lab Setup Guide

2013 6

  1. Upgrade Certification Authority to SHA256
  2. Renew Web Server (SSL) Certificates Automatically
  3. Windows PowerShell CRL Copy v2 posted to the gallery
  4. PKI Library (PKI Documentation and Reference Library Updated)
  5. Windows Server 2012 Active Directory Certificate Services System State Backup and Restore
  6. Certutil and Certreq

2012 18

  1. Query for Advanced CA Configuration Options
  2. Viewing Expired Certificate Revocation List (CRL)
  3. Certificate for WinRT devices and non-domain member devices
  4. Group Protected PFX
  5. Blocking RSA keys less than 1024 bits (part 3)
  6. Blocking RSA Keys less than 1024 bits (part 2)
  7. How to determine if a smart card was used for logon
  8. RSA keys under 1024 bits are blocked
  9. Announcing the automated updater of untrustworthy certificates and keys
  10. Request File Can’t be Located during CA Certificate Renewal
  11. Visual Basic for Applications and SHA2
  12. Best Practice for Configuring Certificate Template Cryptography
  13. Network Device Enrollment Service (NDES) now on the TechNet Wiki
  14. Offline CA articles posted to the TechNet Wiki
  15. HSPD-12 Logical Access Authentication and 2008 Active Directory Domains on Download Center
  16. Connecting iPads to an Enterprise Wireless 802.1x Network Using Certificates and Network Device Enrollment Services (NDES)
  17. Decommissioning an Old Certification Authority without affecting Previously Issued Certificates and then Switching Operations to a New One
  18. EFS Certificates may be recovered as CNG certificates when CAPI CSP is required

2011 16

  1. Windows PowerShell script for Setting up a CA on Windows Server 2008 and Windows Server 2008 R2
  2. Key Recovery vs Data Recovery Differences
  3. How to decommission a Windows enterprise certification authority and how to remove all related objects
  4. Does Enterprise PKI (PKIVIEW) support OCSP?
  5. Updated requirements for a Windows Server 2008 R2 domain controller certificate from a 3rd party CA
  6. Windows 8 Developer Preview and AD CS / PKI: Cannot Get a Certificate from Web
  7. Internet Explorer 9 and Certificate Enrollment using Certificate Authority Web Enrollment
  8. Active Directory Certificate Services Frequently Asked Questions - needs your help!
  9. AD CS Content Updates
  10. Important Security Update for Windows Server: Active Directory Certificate Services Web Enrollment!
  11. Implementing LDAPS (LDAP over SSL)
  12. Deployment of the new Federal Common Policy CA Root Certificate
  13. CA manager approval required for certificate re-enrollment
  14. Quick Check on ADCS Health Using Enterprise PKI Tool (PKIVIEW)
  15. Verifying The SSL Certificate Expiration with a tool
  16. Common Questions about SHA2 and Windows

2010 15

  1. SHA2 and Windows
  2. Active Directory Certificate Services Monitoring Management Pack
  3. Microsoft Certificate Server virtualization policy
  4. Backing up Windows Server 2008 ADCS CA Keys
  5. Firewall Rules for Active Directory Certificate Services
  6. Design Considerations before Building a Two Tier PKI Infrastructure
  7. Certificate Path Validation in Bridge CA and Cross-Certification Environments
  8. Powershell CRL Copy
  9. How to Request a Certificate With a Custom Subject Alternative Name
  10. Disaster Recovery Procedures for Active Directory Certificate Services (ADCS)
  11. Windows Server 2008 R2 AD CS Migration Guide
  12. What CA types are supported for clustering?
  13. Whitepaper “HSPD-12 Logical Access Authentication and Active Directory Domains”
  14. Windows CA Performance Numbers
  15. Clustered Certification Authority maintenance tasks

2009 35

  1. Server 2008 R2 ADCS Migration Guide Beta
  2. AD Schema Requirements for Windows PKI features
  3. How Certificates Are Created
  4. Certificate Revocation Checking Whitepaper
  5. Certificate Validation on Windows XP with Entrust SSP Issued HSPD-12 Certificates
  6. BranchCache Deployment Guide for Windows Server 2008 R2 and Windows 7
  7. Introducing Certificate Template API
  8. Using VBScript to install CA on WS2008R2 server core
  9. Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]
  10. Official Microsoft Team Blogs / Microsoft Blogs
  11. Certificate Enrollment Web Services Whitepaper
  12. How to get request statistics by template in PowerShell
  13. Active Directory Certificate Services Features by SKU
  14. Vishal’s nuggets
  15. Cross-forest certificate enrollment white paper update
  16. Creating self-signed certificates with a script
  17. Populate Subject Name for Offline Templates on Renew
  18. Updated Network Device Enrollment Service (aka SCEP) white paper
  19. Extended Validation support for websites using internal certificates
  20. CA Performace testing
  21. AD CS Installation is Crashing on x64 Platform
  22. Understanding Key Archival
  23. How to create a web server SSL certificate manually
  24. Morello on PKI
  25. What is a strong key protection in Windows?
  26. PKI Enhancements in Windows 7 and Windows Server 2008 R2
  27. CA performance
  28. PKI at TechEd 2009 in LA
  29. How to configure the Windows Server 2008 CA Web Enrollment Proxy
  30. Suite B PKI in Windows Server 2008 and Windows Server 2008R2
  31. Certificate distribution and the Microsoft Terminal Services Client
  32. Certificate Services setup failed with the following error: Element not found. 0x80070490
  33. Cross-forest Certificate Enrollment with Windows Server 2008 R2 Beta
  34. How to decommission a Windows enterprise certification authority and how to remove all related objects from Windows Server 2003
  35. New Windows Biometric Framework and Driver Model

2008 13

  1. Outlook S/MIME certificate selection
  2. Defining the friendly name certificate property
  3. Suppressing certificate attributes in a CA certificate request
  4. Creating offline certificate requests through the user-interface on Windows Vista or Windows Server 2008
  5. Disposition values for certutil –view –restrict (and some creative samples)
  6. TechNet Presents: MCS Talks Enterprise Architecture session 4 – Security and PKI
  7. You cannot add V2 or V3 templates after an inplace upgrade was performed on a Windows Server 2008 enterprise CA
  8. How EffectiveDate (thisupdate), NextUpdate and NextCRLPublish are calculated
  9. New whitepapers about Windows Server 2008 Certificate Services
  10. How to determine all certificates that will expire within 30 days
  11. How to avoid Delta CRL download errors on Windows Server 2008 with IIS7
  12. Update: Import the Root CA Certificate and CRL into an Intermediate CA from a Batch File
  13. How to set up a CA with a CNG (ECC) certificate

2007 14

  1. Manually importing keys into a smart card
  2. How to decode Windows errors
  3. How to refresh the CRL cache on Windows Vista
  4. How to re-install the default certificate templates?
  5. Marking private keys as non-exportable with certutil -importpfx
  6. Credential Roaming Hot Fix Available
  7. The missing EDIT button in the CA properties extensions tab
  8. A simple way to set the certutil -config option
  9. Manually publishing a CA certificate or CRL into a LDAP store
  10. How to find out the max size of certificate attributes
  11. How to manually set the archive flag for certifictes
  12. How to download the most current CA certificate from a certificate web enrollment station
  13. How to use Certificate Services Web enrollment pages together with Windows Vista
  14. How to exclude the certificate template name from certificates to be issued

2006 4

  1. Configuring and Troubleshooting Certificate Services Client–Credential Roaming
  2. The EASY way of CRL troubleshooting in Windows Vista
  3. A file distribution point must follow the UNC syntax
  4. Basic CRL checking with certutil