Category Archives: CA

Certificate related problems when using a web proxy server

I have several times encountered these issues, so it decided it was time to write a blog post about it. The situation You are using a proxy server for web communication. Direct communication to the Internet is blocked. The proxy … Continue reading

Posted in CA, Certificates, CRL, NDES, PKI, SCEP | Tagged , , , | Leave a comment

Require SSL on NDES admin site via PowerShell

Best Practices from Microsoft when deploying Network Device Enrollment Service (available here) states: “Always set up the administrator site with SSL-only configuration. (Disable http access to this site.)” This is to protect the sensitive One Time Passwords that are transmitted … Continue reading

Posted in CA, Certificates, NDES, PKI, SCEP | Tagged , , , | 6 Comments

Can disabling Delta CRL on a CA cause problems?

Imagine that you are using both Base CRL and Delta CRL, but you want to stop using Delta CRL and only use Base CRL going forward. Could this cause any problems in revocation checking if you do not carefully plan … Continue reading

Posted in CA, CRL, PKI, smart card | Tagged , , , | 2 Comments

Internet Explorer and revocation check failure

Internet Explorer normally warns you if the server you visit have any certificate issues. Some examples: The certificate has another Subject than the URL you used to access it: The certificate was issued by a CA that your computer do … Continue reading

Posted in CA, Certificates, CRL, PKI | 1 Comment

The option Enterprise unavailable during CA installation?

When installing a Active Directory Certification Authority (or  CA server for short), the Setup Type option Enterprise might be greyed out: This is most likely because you are not running the installation with an account that local administrator on the … Continue reading

Posted in CA, PKI | Tagged , , , , | Leave a comment