What’s the safest way to move an AD CS CA from Server 2016 to Server 2022?
I'm planning to move an Active Directory Certificate Services (AD CS) installation from a Server 2016 VM to a new Server 2022 VM. A new-server migration seems preferable…
PKI
What’s the simplest way to sign PowerShell scripts?
I need to start signing my PowerShell scripts, but certificates and PKI are pretty confusing to me. I'm looking for a straightforward setup guide and a practical command…
Looking for Study Materials on PKI, Self-Signed Certificates, and mTLS
Hey folks! I'm a DevOps professional with about 3 years of experience. I'm looking to boost the security of my homelab as part of my Certified Kubernetes Security…
How Can I Create a SAML Signing Certificate Using Internal PKI or Intune?
I'm looking to issue a SAML signing certificate from one of our internal Certificate Authorities (CAs) for use with an Enterprise Application in Azure. The goal is to…
What Are the Potential Issues with Having Two Root Certificates in an Active Directory Environment?
I'm looking for advice on managing root certificates in an Active Directory (AD) environment. Right now, we have one AD Certificate Services (AD-CS) server with a single root…
What Are the Best Practices for Controlling SANs in Certificates Using Name Constraints?
I'm exploring methods to control which Subject Alternative Names (SANs) can be included in certificate requests. One approach I'm considering is implementing Name Constraints within the Certificate Authority…
How can I implement Smartcard Login on Windows in a hybrid environment?
I'm a Junior SysAdmin and I'm having a tough time figuring out how to get Smartcard Login working on Windows. My senior colleagues haven't been very helpful. I…
LDAPS Configuration: Should My Application Trust the Root CA or Intermediate CA?
I'm working on setting up LDAPS for an application and need to use a certificate. We have a Microsoft two-tier Certificate Authority infrastructure, and I'm aware that the…
What Do Secure Email (S/MIME) Certificates Really Guarantee?
I'm curious about the actual usefulness of Secure Email (S/MIME) Certificates. I understand the technical aspects: the email sender signs their messages using a private key, while the…
Setting Up Windows Hello for Business: What Should I Know?
I'm looking to implement Windows Hello for Business in an on-premises environment from scratch. I understand that I need to establish a Public Key Infrastructure (PKI) environment to…
Trouble Logging into Windows with Smartcards - Need Help!
Over the weekend, I've run into a major issue with logging into Windows using smartcards (Yubikeys). I keep seeing a message saying, "Revocation status of the smartcard certificate…
Issues with Internal CA Certs after Migration to 2022 Server
Hey everyone! I'm reaching out for some assistance regarding our internal Certificate Authority (CA). We migrated from a 2012 server to a 2022 server last year, and everything…
How Do I Get My PowerShell Scripts Signed?
I'm trying to figure out how to get my PowerShell scripts signed. What do I need in terms of certificates? Do I have to set up something special…