TechNet
Products
IT Resources
Downloads
Training
Support
Products
Windows
Windows Server
System Center
Microsoft Edge
Office
Office 365
Exchange Server
SQL Server
SharePoint Products
Skype for Business
See all products »
Resources
Channel 9 Video
Evaluation Center
Learning Resources
Microsoft Tech Companion App
Microsoft Technical Communities
Microsoft Virtual Academy
Script Center
Server and Tools Blogs
TechNet Blogs
TechNet Flash Newsletter
TechNet Gallery
TechNet Library
TechNet Magazine
TechNet Wiki
Windows Sysinternals
Virtual Labs
Solutions
Networking
Cloud and Datacenter
Security
Virtualization
Updates
Service Packs
Security Bulletins
Windows Update
Trials
Windows Server 2016
System Center 2016
Windows 10 Enterprise
SQL Server 2016
See all trials »
Related Sites
Microsoft Download Center
Microsoft Evaluation Center
Drivers
Windows Sysinternals
TechNet Gallery
Training
Expert-led, virtual classes
Training Catalog
Class Locator
Microsoft Virtual Academy
Free Windows Server 2012 courses
Free Windows 8 courses
SQL Server training
Microsoft Official Courses On-Demand
Certifications
Certification overview
Special offers
MCSE Cloud Platform and Infrastructure
MCSE: Mobility
MCSE: Data Management and Analytics
MCSE Productivity
Other resources
Microsoft Events
Exam Replay
Born To Learn blog
Find technical communities in your area
Azure training
Official Practice Tests
Support options
For business
For developers
For IT professionals
For technical support
Support offerings
More support
Microsoft Premier Online
TechNet Forums
MSDN Forums
Security Bulletins & Advisories
Not an IT pro?
Microsoft Customer Support
Microsoft Community Forums
Sign in
Home
Library
Wiki
Learn
Gallery
Downloads
Support
Forums
Blogs
Resources For IT Professionals
United States (English)
Россия (Pусский)
中国(简体中文)
Brasil (Português)
Skip to locale bar
Get this Tag RSS feed
Translate this page
Powered by
Microsoft® Translator
Popular Tags
Active Directory
AD
AD DS
adfs
ASP.NET
azure
BizTalk
BizTalk Server
BizTalk Server 2010
C#
Candidate for deletion
certification
cloud
core docs
de-DE
EAA
Ed Price
Ed's Stub Pages
en-US
ESA
es-ES
Excel
Exchange
Exchange 2010
fa-IR
Fernando Lugao Veltem
FIM
FIM 2010
FIM Resources
FIM-HELP
forefront
forums
fr-FR
Gokan Ozcifci
has code
has comment
has comments
has image
has Images
has Other Languages
has See Also
Has Table
Has TOC
Horizon_Net
How To
Hyper-V
id-ID
IIS
Italian Wiki Articles
it-IT
ja-JP
Jordano Mazzoni
Link Collection
Luciano Lima
Luigi Bruno
Lync Server 2010
MIISILMFIM MACAULAY
Multi Language Wiki Articles
needs work
operations manager
Pirated Content
Portal
Português Brasil
PowerShell
pt-BR
security
SharePoint
SharePoint 2010
SharePoint 2013
SharePoint Pirate
Small Basic
solucionando problemas
SQL Server
SQL Server 2012
stub
System Center
System Center 2012
TechNet Guru
TechNet Wiki
TechNet Wiki Featured Article
tonyso
Translated into Japanese
troubleshooting
tr-TR
vídeo
Video
Virtualization
VMM
Wiki
Windows
Windows 7
Windows 8
Windows Azure
Windows Server
Windows Server 2003
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
yottun8
اکتیو دایرکتوری
Browse by Tags
>
TechNet Articles
>
All Tags
>
certificate
Tagged Content List
Wiki Page:
How to Create a Certificate Trust List in Windows Server 2008 R2 for Use with Unified Access Gateway
Richard Mueller
In Windows 2008 R2 it is (not yet) possible to create a certificate trust list (CTL) in order to restrict login with user certificates to IIS only to specific Certificate Authorities. However CTLs can be imported and then used with IIS. In order to achieve this, we need to use the utility MakeCTL which...
on
16 Sep 2013
Wiki Page:
Certificate Services Lifecycle Notifications
Maheshkumar S Tiwari
Applies to Windows 8 and Windows Server 2012 Table of Contents Overview Event Viewer Task Scheduler Settings for Autoenrollment added to Group Policy Windows PowerShell Script for IIS Binding Scripting considerations Windows PowerShell script security Denial of service potential Do not use CertificateServicesClient...
on
13 Sep 2013
Wiki Page:
How to Renew the ConfigMgr 2007 Site Server Signing Certificate (Microsoft Certificate Services)
Maheshkumar S Tiwari
Have you tried to renew the existing site server signing certificate for a native mode site, and wondered how to do this without creating a new certificate? This post provides a procedure to do this that is suitable for when the site server is on either Windows Server 2003 or Windows Server 2008, and...
on
13 Sep 2013
Wiki Page:
AD FS 1.0 and 1.1: How to Replace the SSL, Token-Signing, and Federation Server Proxy Certificates
Maheshkumar S Tiwari
Replacing the SSL certificate 1. Obtain a new certificate with the following requirements a. Enhanced Key Usage is at least Server Authentication . If you are obtaining this from an internal MS Enterprise CA, the Web Server template will work fine. b. Subject or Subject Alternative...
on
10 Sep 2013
Wiki Page:
Lync Certificate Planning and Assignments
Ed Price - MSFT
Lync Certificate Planning and Assignments (Edge, Reverse Proxy, Director, Frontend, Mediation, WAC) Copyright© and written 2013 by Thomas Pött, MVP Lync/ Unified Communication Table of Contents 1 About the Author: 2 GENERAL 3 Server Components (Certificates are requited...
on
5 Sep 2013
Wiki Page:
Enable Auto Enrollment to Avoid Expiring Certificates
Maheshkumar S Tiwari
Its common that sometimes few admins miss the renewal of some key certificates in their Microsoft internal PKI (Public Key Infrastructure), this is due to the fact that its a bit of manual task and you need to set manually some Outlook reminders (My favorite method) or run schedules tasks to remind...
on
29 Aug 2013
Wiki Page:
Certificate Revocation List (CRL) Verification - an Application Choice
Naomi N
It seems to be a FAQ disabling revocation checking in specific scenarios. This can be either a test or a formerly badly configured environment. While it is not recommended to turn off revocation checking , I want to provide you some references where you can find technical information to alter the...
on
23 Aug 2013
Wiki Page:
The Validity Period of an Issued Certificate is Shorter than Configured
Naomi N
I recently encountered couple of scenarios where one of the issued Certificates in Microsoft PKI infrastructure solution has validity period shorter than the period already configured on the template of this certificate. The main reason of changing and increasing the validity period/years for several...
on
19 Aug 2013
Wiki Page:
How to Publish New Certificate Revocation List (CRL) from Offline Root CA to Active Directory and Inetpub
Naomi N
It is highly recommended when building your Microsoft PKI (Public Key Infrastructure) to have your Root CA offline after issuing the Enterprise Sub CA certificates. It is recommended to minimize the access to the Offline Root CA as possible. The Root CA is not a domain joined machine and can be turned...
on
16 Aug 2013
Wiki Page:
SharePoint 2010: Configure SSL for a web site (fr-FR)
Gokan Ozcifci
Apres avoir incorporé le Form Based Authentication dans une de mes web App, la grande discussion était de savoir si l’on allait passer par le port 443 ou port 80. Grande nouvelle pour la société on passe à travers le 443 et donc mauvaise nouvelle pour moi, c’est parti pour la configuration SSL. ...
on
13 Aug 2013
Wiki Page:
How to Create a x509 Certificate for Windows Azure SQL Database Management API
Jonathan Gao
The Windows Azure SQL Database Management API requires mutual authentication of certificates. Any valid X.509 v3 certificate can be used. You must first upload a public key certificate (.cer) file to the Windows Azure certificate store, and associate it with a subscription. Then, you attach the matching...
on
7 Aug 2013
Wiki Page:
Certificate Management Resource Wiki
Steve Light - MSFT
Table of Contents RSS FEEDS CLM FAQ FIM Technical Library ( link ) CLMUtil Blogs Downloads Test lab guides Virtual labs Webcasts, videos and events Podcasts Wiki See Also RSS FEEDS If you want to be kept up-to-date automatically when new articles or posts are submitted, you can subscribe to the...
on
30 Jul 2013
Wiki Page:
Configure SSL/TLS on a Web Site in the Domain with an Enterprise CA
Ed Price - MSFT
There are many web (HTTP) services that require secure sockets layer (SSL) / transport layer security (TLS). If you have an Windows Server-based Enterprise Certification Authority (CA), you can use the following instructions to get an SSL certificate configured for an Internet Information Services...
on
23 Jul 2013
Wiki Page:
Public Key Infrastructure Design Guidance
Naomi N
Before you configure a Public Key Infrastructure (PKI) and certification authority (CA) hierarchy, you should be aware of your organizations security policy and certificate practice statement (CPS). If your organization does not have such policy statements, you should consider creating them. For more...
on
4 Jul 2013
Wiki Page:
Deploying RD Gateway using a Scenario Based Deployment
Carsten Siemens
This Wiki runs you through the setup to add a RD Gateway role to an existing Remote Desktop Services Scenario. The RD Gateway role is one of the two roles that, as of yet, cannot be deployed using the inital scenario based deployment. That's why adding the RD Gateway envolves the following steps...
on
26 May 2013
Wiki Page:
Troubleshooting: RMS 1.0 Sp2 On Windows server 2003 Sp2 - Error User certificate or Machine not activated
Payman Biukaghazadeh
Error Message The error message is posted on the TechNet article - http://ow.ly/lo5u6 when you rum IRM check (Latest version is available on - http://aka.ms/irmcheck ) . Resolution Warning Using Registry Editor incorrectly can cause serious problems that may require...
on
25 May 2013
Wiki Page:
AD FS 2.0: How to Replace the SSL, Service Communications, Token-Signing, and Token-Decrypting Certificates
Carsten Siemens
Table of Contents Replacing the SSL and Service Communications certificate Replacing the Token-Signing certificate Replacing the Token-Decrypting certificate More Information Were you looking for AD FS 1.x information regarding certificate replacement? Have you recently enabled AutoCertificateRollover...
on
15 May 2013
Wiki Page:
Event ID 1220 — LDAP over SSL (LDAPS)
Kurt L Hudson MSFT
Table of Contents Applies to Overview Event Details Resolve Configure LDAP over SSL Verify Related Management Information Applies to Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 Overview The TechNet Library version of...
on
9 May 2013
Wiki Page:
How to Generate a Self-Signed Certificate Using PowerShell
Richard Mueller
Overview There may come a time when a certificate is needed for testing purposes, and a certification authority (CA) is not readily available. The sample script below provides the following: -Self-signed certificates in the Local Machine Personal store -2048 lenth private keys marked exportable...
on
23 Apr 2013
Wiki Page:
AD FS 2.0: How To Modify The Duration of AutoCertificateRollover Certificates
Yagmoth555
Overview By default in AD FS 2.0, the self-signed certificates generated by AutoCertificateRollover are valid for 365 days. Although AD FS 2.0 will maintain these certificates for the service, it is the responsibility of the AD FS 2.0 administrator or the Claims Proivder/Relying Party partner administrator...
on
23 Feb 2013
Wiki Page:
SBS 2011: Repair Certificate Issues
Richard Mueller
How to Repair Certificate Issues in Windows Small Business Server 2011, Windows Home Server 2011, and Windows Storage Server 2008 R2 Essentials Table of Contents Applies To: Background Symptoms Cause Solution Applies To: Windows Small Business Server 2011, Windows Home Server 2011,...
on
22 Feb 2013
Wiki Page:
Certificates Help
Ed Price - MSFT
This topic extends the help provided for certificates in Windows. Table of Contents Certificate Path Validation Settings Stores tab Trusted Publishers tab Network Retrieval tab Revocation tab Domain Group Policy Credential roaming Certificate autoenrollment Certificate path validation Certificate...
on
13 Feb 2013
Wiki Page:
Errata in Windows Server® 2008 PKI and Certificate Security from MS Press
Yagmoth555
This article has been created in response to customer issues that have been brought up to Microsoft Support, forums, and other community connection points. The official location to submit errata for the Windows Server® 2008 PKI and Certificate Security book by Brian Komar is on the O'Reilly Web...
on
5 Feb 2013
Wiki Page:
AD CS PKI Design
Richard Mueller
Active Directory Certificate Services (AD CS) Public Key Infrastructure (PKI) Design Guide The Windows Server® product line provides a variety of secure applications and business scenarios based on the use of digital certificates. Before you can use digital certificates, however, you need to design...
on
15 Jan 2013
Wiki Page:
How to Use a Self Signed Certificate in Exchange 2010
dplotnikov - mvp
We can use a self signed certificated for Exchange 2010 , Now will learn how to do it. Something which you need to know is , Using a self signed certificate you need to install the certificates on every machine you use and Mobile devices other wise you will end up in a certificate error in the...
on
9 Oct 2012
Page 1 of 2 (33 items)
1
2
Can't find it? Write it!
Post an Article