Happy New Year from PKI Solutions!
Happy New Year! New Year, New Way to PKI As we kick off the New Year, Mark B. Cooper, President & Founder of PKI Solutions, shares his thoughts about the past year and provides a look forward at the year ahead. 2021 was a transformative year for PKI Solutions as we continued to evolve our […]
PKI Solutions Featured in Portland Business Journal
We’re excited to share that PKI Solutions was featured in a Portland Business Journal article, “Lake Oswego cybersecurity firm targets overlooked vulnerability” this week. Recently, Malia Spencer, technology reporter for the Portland Business Journal, interviewed our own Mark B. Cooper for her well-written article that gives a great overview of PKI Solutions and how the […]
Microsoft Security Advisory for ADCS exploit – ADV210003
This morning we provided details to our existing support and co-management customers on a recent notice of vulnerability to certain Microsoft ADCS configurations. The exploit involves NTLM and leveraging some ADCS PKI components. Full details can be found here: https://msrc.microsoft.com/update-guide/en-US/vulnerability/ADV210003. Summary In environments with NTLM authentication still enabled in Active Directory and when using ADCS Web […]
New ‘Introduction to Certificates & Keys’ Training Course Available Now!
Organizations that are committed to maintaining the highest level of cybersecurity to protect their data need to have a highly educated IT team with a broad base of cybersecurity knowledge – including knowledge about the basics of PKI. That’s why we are excited to announce that our new Introduction to Certificates & Keys training course […]
PKI Solutions – A Personal Journey and Trusted Business Solution
Last summer while on lockdown along with the rest of the world, I was presented with an opportunity to work for PKI Solutions, a global leader in PKI consulting and professional services based in Portland, OR. At the time, I was managing my sales and marketing business and considered taking on more work. There was […]
Microsoft OCSP Responders – Trust, Renewals and RFC 6960
Online Certificate Status Protocol (OCSP) provides an efficient mechanism for distributing certificate revocation information. When certificates are exchanged and validated, computers need to determine if the certificate has been revoked – meaning the CA has reason to consider the certificate as untrusted. This often placed in a Certificate Revocation List (CRL). Clients download this potentially large CRL […]
Emphasizing Security Best Practices; the Rise and Fall of Diginotar
Between June 2011 and the end of the year, Diginotar, a Dutch Certificate Authority and wholly owned subsidiary of Vasco Data Security International, fell from a rising Euro tech star to a government takeover and subsequent bankruptcy. Diginotar had the wind in its sails; a deep-pocketed American parent, the full trust and patronage of the […]
Webinar: Deadlines, Impact & Action: Certificate Based Authentication Changes (KB5014754)
Enjoy an hour of Pre-Recorded Live Q&A at our PKI Solutions “Office Hours.” – Deadlines Impact & Action: Certificate Based Authentication Changes (KB5014754) To address the threats from CVE-2022-34691, CVE-2022-26931 and CVE-2022-26923, Microsoft will enforce strong mappings between an authentication certificate and the account object with a new Object Identifier Extension (OID) 1.3.6.1.4.1.311.25.2. Microsoft is […]