Server 2016 – Unable to set Certificate to Issue

I recently hit a brick wall while trying to update a certificate template in my stand-alone Server 2016 Certificate Authority. My goal was to add the “Client Authentication” policy to the the Web Server template, but whilst I could create the new template without any problems, Windows wouldn’t let me add it to the list …

Continue reading ‘Server 2016 – Unable to set Certificate to Issue’ »

Update-SfbCertificate.ps1

Skype for Business – like so much else these days – relies on PKI certificates, and the community has risen to the opportunity with some great tools to help us manage them. Here are two in my “essentials” kit: Check out the “Lync Certificates Report“: If you’ve not found it already, Guy Bachar & Yoav …

Continue reading ‘Update-SfbCertificate.ps1’ »

Compare-PkiCertificates.ps1

I recently went looking for a script that would compare two “identical” certificates for me and highlight the differences between them. I drew a blank. It might be out there, but I missed it – so I wrote my own. “Compare-PkiCertificates.ps1” takes the thumbprints of two certificates you expect to be similar or identical, and …

Continue reading ‘Compare-PkiCertificates.ps1’ »

Find the Certificate Authority with one easy command

When you’re on a new or unfamiliar customer’s site it’s sometimes a challenge to locate their CA. In the past (assuming a working Lync or OCS installation) I’ve stepped through the “Request, Install or Assign Certificates” stage in setup.exe / Deployment Wizard, purely because it automatically detects the PKI CA (but then won’t let you …

Continue reading ‘Find the Certificate Authority with one easy command’ »