NTDS replication warning with Event ID 1093 — Template Best Practices
When configuring and managing Active Directory Certificate Services (ADCS) PKI, little things can have downstream impacts. Recently a client reached out regarding replication errors the team managing the domain controllers had forwarded. Microsoft lists a solution to the issue but does not address the root cause: https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/ntds-replication-warning-event-id-1093 The root cause of the issue is a default […]
Don’t Believe the FUD – Microsoft PKI is Your Key to Crypto Agility
It’s that time again—the point in the tech cycle where vendors exploit uncertainty to spread Fear, Uncertainty, and Doubt (FUD) in cybersecurity. What’s the latest FUD in PKI? The same old misinformation: that Microsoft Active Directory Certificate Services (ADCS) is going away. If you’ve encountered a PKI vendor claiming, “Microsoft is discontinuing ADCS, so you […]
Active Directory Certificate Services (ADCS) Certificate Authority Renewal Error
Certificate Authority Migration and Renewal In the past year many enterprises have migrated their Microsoft ADCS based PKI Infrastructure from Windows Server 2012 R2 to a newer operating system. The most common path for the migration is backup & restore to a server with the same name or backup & restore to server with a […]
New Online PKI Training Courses Are a Deep Dive into Public Key Infrastructure: Critical for IT Security, IoT, 5G, and SHAKEN/STIR
Why Public Key Infrastructure (PKI)? A PKI is the core of IT for enterprises, supporting network authentication, data encryption, code signing and secure email. In addition, in the next two years, 42 percent of Internet of Things (IoT) devices such as temperature sensors, televisions, and smart vehicles will rely primarily on digital certificates for identification […]
Hidden switches of Certutil.exe and Certreq.exe
Hey Kids, Rock and Roll! Two of the most reliable toolsets in Windows for the last two decades have been the tandem of certutil.exe and certreq.exe. It’s no secret there are a wealth of very useful functions exposed in the basic usage of these tools, also documented publicly here: certutil.exe public documentation certreq.exe public documentation […]