Preparing for Microsoft’s Strong Certificate Mapping Enforcement – What You Need to Know
Microsoft’s recent update, released on February 11, 2025, significantly changed certificate-based authentication by introducing Strong Certificate Mapping. This update is designed to reduce the risk of credential escalation by enforcing stricter mapping requirements for certificates used in authentication. Ensuring compliance in organizations that rely on certificate-based authentication is necessary and vital for preventing authentication failures and costly […]
PowerShell PKI Module v3.4.2 and upcoming plans
I’m glad to announce that a new version of PowerShell PKI (PSPKI) module is released. It is available for installation from PowerShell Gallery: https://www.powershellgallery.com/packages/PSPKI/ PSPKI was in stable development for last year and most changes are bug fixes and usability improvements. Release notes for v3.4.2: https://dev-pki-solutions-old.pantheonsite.io//tools/release-notes-for-pspki-v342/. However, it doesn’t mean that the module is done or dead. […]
AzureSignTool incorrectly identifies unsigned files as signed
Some time ago a fellow I’m following on a Twitter, Marc-André Moreau posted an interesting tweet: Okay, this is the weirdest thing: we call AzureSignTool with ‘-s’ to skip signing already signed files, and it… incorrectly thinks one of our native DLLs is already code signed when it is not… for *both* x64 and arm64. […]
PowerShell PKI Module (PSPKI) v3.5 New Year Edition
Time-Stamp Protocol client As a part of improved support of PKCS#7 messages, we added a .NET-compatible RFC 3161 Time-Stamp Protocol implementation. There are two common use cases for this protocol: Provide a current date and time for devices that don’t have built-in clocks; Certify that particular data existed at certain time point Second aspect is […]
Register TLS certificate with Remote Desktop Service using PowerShell
Hello everyone! This is a quick blog post that provides information on how to register TLS certificate with Remote Desktop Services (RDS). Starting with Windows Server 2008 R2 it became extremely easy to deploy RDS certificates to AD hosts from private CA using group policies and Microsoft CA. Since then RDS over TLS should be […]
PowerShell File Checksum Integrity Verifier (PsFCIV)
Today I’m glad to announce a PowerShell File Checksum Integrity Verifier (hereinafter PsFCIV) availability as a standalone package. Years ago a friend of mine asked to develop a PowerShell script that would replace a now-discontinued Microsoft File Checksum Integrity Verifier (FCIV) tool that is an essential utility to check integrity of large file shares. While […]
Just Released – Licensing Options for Our PKI Tools
I am pleased to announce that based on overwhelming demand, starting today we are now providing licensed and supported versions of our most popular PKI tools – PowerShell PKI Module, ASN.1 Editor, and the SSL Certificate Verifier. Available in single user or enterprise licenses and includes 12-months of support for the tool. The licensing model […]
PowerShell PKI (PSPKI) 3.7 enhancements – security descriptors
Today I’m starting a series of blog posts where I will explore new features we have added to PowerShell PKI module, version 3.7. First post is dedicated to security descriptors. Major changes in PSPKI Within PSPKI module, we had an ability to manage security descriptors (access control lists) for Certification Authority can certificate template objects. […]