Issues with In-Place Upgrade of Windows OCSP Server
Recently, a client reached out after experiencing issues with an in-place upgrade of a Windows OCSP server. After the upgrade, the Online Responder had a bad signing certificate and would not request a new one. This is a unique case, as the Online Responder server was using a Luna HSM for key protection and had […]
Why PKI Fails
Posts in this series: Part 1 — What Is PKI? Part 2 — What Is a Certificate Authority? Part 3 (this post) — Why PKI Fails Part 4 — Certificate Revocation Explained PKI Failure Defined PKI fails primarily due to operational issues such as expired certificates, revocation failures, misconfigurations, and lack of monitoring. Most failures […]