PowerShell PKI (PSPKI) 3.7 enhancements – OCSP Server Management
Today I’m starting a series of blog posts where I will explore new features we have added to PowerShell PKI module, version 3.7. First post is dedicated to Online Responders. The biggest part of this release is Microsoft OCSP Server, or Online Responder management feature. In this post, I will show general Online Responder server […]
The Hidden Cost of a Single Click
https://www.pkisolutions.com/wp-content/uploads/2024/01/How-EFS-Settings-Expose-You-to-Risks-Vulnerabilities-and-Exploits-11.30.22.mp4 I type how I talk, and I tell stories in the voice of the time. It was a different time in corporate IT and a different attitude with the Microsoft stack ranking system. In 2007 I interviewed for the ACE Team at Microsoft and one of my interviewers was Roger Grimes. He asked me […]
‘The handle is invalid. 0x80070006 (WIN32: 6)’ when dumping CA database
As part of joining PKI Solutions, several blog posts from my old site are re-posted here for visibility and thoroughness. Issue Consider the following scenario: you are dumping CA database by using certutil, PowerShell or any other tool that utilizes ICertView2 interface and at some point you receive the following error Certutil: CertUtil: -view command […]
Web server certificate enrollment with SAN extension
As part of joining PKI Solutions, several blog posts from my old site are re-posted here for visibility and thoroughness. Many of windows administrators requires to setup SSL on their web servers and mostly they wish to use certificates with the Subject Alternative Name extension that allows to map a single certificate to a multiple […]
Webinar Q&A For: Common And Risky MS Intune And NDES Misconfigurations and How to Fix Them
https://www.youtube.com/watch?v=VS0W7xrf7mc Q: Is there a way we could configure NDES Certs to be auto-renewed? A: By default, the base NDES install templates are set to expire. It is a matter of recreating the templates and setting them to auto renew. So, we do not run the risk of having them expire. This also is […]
PowerShell PKI (PSPKI) 3.7 enhancements – OCSP Revocation Configuration Management
Hello everyone, today is a second post in OCSP server management in Windows PowerShell. First blog post in the series was about OCSP server management. Today, I will discuss about Online Responder revocation configuration management using Windows PowerShell. Intro Every single Microsoft Online Responder is capable to provide certificate status for multiple different certification authorities. […]
Webinar Transcript: Common And Risky MS Intune And NDES Misconfigurations and How to Fix Them
Muneer Mubashir: Start the recording. So here we are with me today. I have Jake grand Leonard. Jake is our senior solutions consultant hereat PKI solutions. Hi Jake. Jake Grandlienard: Hi there. How’s everyone doing? Muneer Mubashir: Excellent. Glad you could. You could join us today. So before we get into the, to the agenda, […]
The case of accidentally deleted user certificates
As part of joining PKI Solutions, several blog posts from my old site are re-posted here for visibility and thoroughness. Sometimes users accidentally delete their certificates from personal store. After that users are not able to perform certificate-based tasks, i.e. decrypt files or mail, sign data and authenticate. Some organizations implement Key Archival for certificate […]