Browse by Tags

Tagged Content List
  • Wiki Page: Publishing Applications in a Windows Server 2008 R2 RD Session Host Farm

    Note: This article is based on RDS 2008 (R2) and might not apply to RDS 2012 (R2) Overview of Remote Desktop Services (RDS) This is a landing page for information about publishing applications, including but not limited to the following topics: Application compatibility The application...
  • Wiki Page: AD FS 1.0 and 1.1: How to Replace the SSL, Token-Signing, and Federation Server Proxy Certificates

    Replacing the SSL certificate 1. Obtain a new certificate with the following requirements a. Enhanced Key Usage is at least Server Authentication . If you are obtaining this from an internal MS Enterprise CA, the Web Server template will work fine. b. Subject or Subject Alternative...
  • Wiki Page: Step by Step for using Certificates to communicate between agents and the Operations Manager 2007 server

    Table of Contents Introduction 1. Importing Trusted Root certificate. 2. Creating and installing Server (Client, Server) Certificates 3. Creating an installing Server (Client, Server) Certificates 4. Export the Server (Client, Server) Certificate 5. Allow manual agent installation. 7. Running MOMcertimport...
  • Wiki Page: BizTalk Server: Importing Certificates

    Table of Contents Introduction Other People Store Personal certificate store Importing certificates Microsoft Management Console CertWizard See Also Introduction BizTalk Server depends mainly on security provided by certificates and uses them for encryption, decryption, signing and verifying digital...
  • Wiki Page: Configuring Certificates for AS2 Messages

    Table of Contents Introduction Configuring Certificates to Sign Outgoing AS2 Messages Configure Certificate with Private Key in Current User/Personal Certificate Store What is digital signing? How to confirm certificate has private key How to install certificate authority in Windows Server 2008 How to...
  • Wiki Page: Display Subject Alternative Names of a Certificate with PowerShell

    Subject Alternative Names (SANs) are stored as System.Security.Cryptography.X509Certificates.X509Extension objects in the PowerShell Certificate Provider . First you can get the cert you want to view. $cert = get-childitem cert:\localmachine\my\73844B2206C170903185E777F65E969247462741...
  • Wiki Page: PKI FAQ: What is the maximum number of names that can be included in the SAN extension?

    There is no specific limit on the number of names that can be included in the SAN extension of a certificate issued by a Windows Certificate Authority (CA). The total size, however, of any encoded extension is limited to 4KB, because that is the maximum size of the database field as defined in the...
  • Wiki Page: Windows PKI Documentation Reference and Library

    This page was initially a copy from http://blogs.technet.com/b/pki/archive/2007/08/19/windows-pki-documentation-reference.aspx . Since TechNet Wiki is better suited to maintain continuously enhancing information, we will maintain the link library here. Table of Contents General information Community...
  • Wiki Page: AD FS 2.0: How to Replace the SSL, Service Communications, Token-Signing, and Token-Decrypting Certificates

    Table of Contents Replacing the SSL and Service Communications certificate Replacing the Token-Signing certificate Replacing the Token-Decrypting certificate More Information Were you looking for AD FS 1.x information regarding certificate replacement? Have you recently enabled AutoCertificateRollover...
  • Wiki Page: Troubleshooting PKI Problems on Windows

    Other Resources Security Developer Center Cryptography Topics on MSDN Follow us on Twitter CAPI2 Diagnostics is a feature first introduced in Microsoft® Windows® Vista. This feature provides administrators with an ability to troubleshoot PKI problems by collecting detailed...
  • Wiki Page: Windows XP: Certificate Status and Revocation Checking

    Applies To Windows XP Currently this Applies to Windows XP only. The article How Certificate Revocation Works applies to Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2. The goal is to integrate the two articles here in the future. Table of Contents Introduction...
  • Wiki Page: Office 365 - Identity Federation: Email Received Stating: "An important certificate used to sign communications between your on-premises single sign-on deployment and the federated domain(s) that you’ve designated in Office 365, will expire within the

    Overview These proactive emails are geared towards ensuring that you are prepared for certificate replacement, if needed. By default, AD FS 2.0 utilizes self-signed certificates for token-signing and token-decrypting. This feature is called AutoCertificateRollover , and you can ensure that...
  • Wiki Page: Exchange 2007/2010 Certificates - Simple

    Microsoft has made some signifcant changes to the way we install certificates with Exchange 20007/2010. In 2003 you simple installed the certificate in IIS console and you were up with OWA securely in no time. in 2007/2010 it is a little different. This article will focus on a simple deployment and...
  • Wiki Page: AD RMS: How to Exclude a User Whose RMS Credentials Are Compromised

    If a user is trusted but his or her RMS credentials are compromised, you can exclude the user’s rights account certificate by excluding its public key. When you do this, RMS denies new use license requests that involve that rights account certificate. After you exclude a rights account certificate...
  • Wiki Page: Troubleshooting the “No Usable Certificate(s)” IP-HTTPS Client Error

    [The original version of this posting can be found on "The Edge Man" blog over at http://blogs.technet.com/tomshinder/archive/2010/03/30/troubleshooting-the-no-usable-certificate-s-ip-https-client-error.aspx ] An interesting case came in last week and I thought it would be useful to share...
  • Wiki Page: New Networking-Related KB Articles for the Week of February 28 – March 6, 2010

    Here are the latest networking-related Knowledge Base articles for the week of February 28 through March 6, 2010: 980027 A Windows Server 2008 domain controller cannot allocate new ports when Server for NIS is running 978856 Error message when you try to start the Server service in Windows Server...
Page 1 of 1 (16 items)
Can't find it? Write it!