Tag Archives: CA

Get a free publicly trusted certificate using Let’s Encrypt, PowerShell and DNS

Posted on 4 December, 2017 by Tom Aafloen

I have previously blogged about the free publicly trusted certificate solution Let’s Encrypt, see here. In this post, I will show how you can request a certificate with a PowerShell script and prove ownership of the domain name using DNS … Continue reading →

Posted in CA, Certificates, LetsEncrypt, PKI, SAN, SSL | Tagged , , , , , | Leave a comment

Certificate related problems when using a web proxy server

Posted on 27 September, 2017 by Tom Aafloen

I have several times encountered these issues, so it decided it was time to write a blog post about it. The situation You are using a proxy server for web communication. Direct communication to the Internet is blocked. The proxy … Continue reading →

Posted in CA, Certificates, CRL, NDES, PKI, SCEP | Tagged , , , | 4 Comments

Configure AD CS to use a static DCOM port

Posted on 20 February, 2014 by Tom Aafloen

Normally when you start a Windows CA server it allocates a random high port number for the service to listen on. When clients want to enroll certificates they find this dynamic port number by asking the CA Server’s RPC Endpoint … Continue reading →

Posted in Okategoriserade | Tagged , , , , , | 9 Comments

The option Enterprise unavailable during CA installation?

Posted on 15 January, 2014 by Tom Aafloen

When installing a Active Directory Certification Authority (or  CA server for short), the Setup Type option Enterprise might be greyed out: This is most likely because you are not running the installation with an account that local administrator on the … Continue reading →

Posted in CA, PKI | Tagged , , , , | 4 Comments

Which Root CAs do you really trust?

Posted on 31 January, 2013 by Tom Aafloen

When I ask people which Root CAs they trust, they usually show me the list in Trusted Root Certification Authorities. Like this one, from a freshly installed Windows Server 2012: But that is actually not the entire truth. If I … Continue reading →

Posted in PKI | Tagged , , , , , , | 2 Comments