Category Archives: PKI

The option Enterprise unavailable during CA installation?

When installing a Active Directory Certification Authority (or  CA server for short), the Setup Type option Enterprise might be greyed out: This is most likely because you are not running the installation with an account that local administrator on the … Continue reading

Posted in CA, PKI | Tagged , , , , | 1 Comment

Delete certificates on smart cards

If you want to delete existing certificates on a smart card, follow these steps: Start PowerShell (or cmd, since we do not actually use PS-commands) Insert the smart card in a reader Run the command certutil -scinfo Enter PIN if … Continue reading

Posted in PKI, smart card | Tagged , | Leave a comment

Which Root CAs do you really trust?

When I ask people which Root CAs they trust, they usually show me the list in Trusted Root Certification Authorities. Like this one, from a freshly installed Windows Server 2012: But that is actually not the entire truth. If I … Continue reading

Posted in PKI | Tagged , , , , , , | 2 Comments