I recently hit a brick wall while trying to update a certificate template in my stand-alone Server 2016 Certificate Authority. My goal was to add the “Client Authentication” policy to the the Web Server template, but whilst I could create the new template without any problems, Windows wouldn’t let me add it to the list …
Continue reading ‘Server 2016 – Unable to set Certificate to Issue’ »
“Nothing is certain but death & taxes”. And certificate expiry. I’ve dodged the first one so far this year, but the other two have made up for it – and even more so with certs, as I’ve dealt with several customers where their root or intermediate certs have all expired. And yes, if you were …
Skype for Business – like so much else these days – relies on PKI certificates, and the community has risen to the opportunity with some great tools to help us manage them. Here are two in my “essentials” kit: Check out the “Lync Certificates Report“: If you’ve not found it already, Guy Bachar & Yoav …
I recently went looking for a script that would compare two “identical” certificates for me and highlight the differences between them. I drew a blank. It might be out there, but I missed it – so I wrote my own. “Compare-PkiCertificates.ps1” takes the thumbprints of two certificates you expect to be similar or identical, and …
When you’re on a new or unfamiliar customer’s site it’s sometimes a challenge to locate their CA. In the past (assuming a working Lync or OCS installation) I’ve stepped through the “Request, Install or Assign Certificates” stage in setup.exe / Deployment Wizard, purely because it automatically detects the PKI CA (but then won’t let you …
Continue reading ‘Find the Certificate Authority with one easy command’ »