The PKI Blog

Backing up ADCS Certificate Authorities (Part 2 of 2)

By ThePKIGuy | Jan 11, 2018

In my last blog post (Backing up ADCS Certificate Authorities Part 1) I covered the inner workings of how ADCS and the Jet database works to maintain the CA data. In this post I am going to go over a comprehensive PowerShell script that I wrote to perform a full backup of all necessary ADCS…

Read More

Backing up ADCS Certificate Authorities (Part 1 of 2)

By ThePKIGuy | Dec 14, 2017

One of the areas I have spoken about extensively at conferences and cover in our training classes is the unique issues associated with backing up and managing your ADCS Certificate Authority. There are several items I would like to address in this two-part series: CA Database and log file structure Unique issues with VM Snapshots with…

Read More

2018 Training Class Schedule

By ThePKIGuy | Oct 25, 2017

It’s here, the 2018 PKI Training schedule is now live and accepting registrations. There are three In-Depth classes and three Advanced PKI classes split between the US and Europe. Be sure to check out the schedule and register early as classes usually sell-out in advance. PKI In-Depth Class Portland, Oregon: March 26-30, 2018 Washington DC:…

Read More

Book Recommendation – Hacking the Hacker (Roger Grimes)

By ThePKIGuy | Jun 5, 2017

Book Recommendation A good friend of mine I met while at Microsoft just had one of his books released. Roger is a Security Columnist for InfoWorld and is a pretty dang sharp guy. His new book, Hacking the Hacker has some good information in many different areas confronting modern cybersecurity specialists. Of particular interest to…

Read More

PKI Solutions Announces Training Scholarships for PDX Cyber Camp 2017

By ThePKIGuy | May 3, 2017

I am pleased to announce that in partnership with the PDX Cyber Camp, PKI Solutions has created a scholarship for 3 young students attending the PDX Cyber Camp to attend one of my PKI In-Depth training classes this year. This will be a great way to offer these students an exposure to PKI and all of…

Read More

Help a SME Out – Don’t Guess at Template Settings

By ThePKIGuy | May 2, 2017

One of the areas we spend time on in the PKI In-Depth class is learning about Certificate Templates. There are a lot of tabs in the template manager and a lot of specific settings on those tabs. I can certainly understand the desire to click those pretty checkboxes, toggle radio buttons and get lost in…

Read More

Ignore Revocation Checking – The bane of my existence!

By ThePKIGuy | Apr 20, 2017

As students in my PKI training classes know, one of the areas I am a vocal about is the blind use of the CRLF_REVCHECK_IGNORE_OFFLINE setting in a PKI environment. I am so adamantly against the use of this setting, I personally refuse to ever explicitly share or type the syntax to enable this nasty beast.…

Read More

What Your Browser Doesn’t Tell You Can Hurt You – Revocation and Internet Explorer

By ThePKIGuy | Feb 11, 2017

One of the topics I have been using as an example of revocation checking behavior in my PKI In-Depth class is the interesting case of Internet Explorer (IE) and its revocation behavior. Let’s take a moment and have you think about your assumption of how IE is behaving when you go to a HTTPS (SSL/TLS)…

Read More

RSASSA-PSS – Why Your Certificate Can’t Be Validated

By ThePKIGuy | Feb 1, 2017

A common theme has been arriving in my email box lately as well as many online forums. Consistently people are reporting error with certificates issued by their internal Microsoft ADCS based CAs. Problems range from Apple devices, Firefox, appliances and many other systems. When people examine their certificates they see that their certificates are SHA…

Read More