Tag: Active Directory Certificate Services

Set up Microsoft PKI (ADCS) for SystoLOCK via PowerShell

Posted on Christian By Christian No Comments on Set up Microsoft PKI (ADCS) for SystoLOCK via PowerShell
Set up Microsoft PKI (ADCS) for SystoLOCK via PowerShell

Windows domains operate normally without Active Directory Certificate Services (AD CS), provided that no Public Key Infrastructure (PKI) functionality is required. However, SystoLOCK depends heavily on PKI, this means you must deploy and correctly configure a Certification Authority (CA) before installing SystoLOCK. Therefore, in this guide, I will be discussing the steps to “Set up…

Read More “Set up Microsoft PKI (ADCS) for SystoLOCK via PowerShell” »

Windows Server

Generate a self-signed SSL certificate: Enable LDAP over SSL

Posted on Temitope Odemo By Temitope Odemo No Comments on Generate a self-signed SSL certificate: Enable LDAP over SSL
Generate a self-signed SSL certificate: Enable LDAP over SSL

In this article, we shall discuss “Generate a self-signed SSL certificate: Enable LDAP over SSL”. SSL stands for Secure Sockets Layer; this is a standard secure layer for keeping an internet connection secure and safeguarding any sensitive data that is being sent between two endpoints. See How to fix the issue “The Security Database on…

Read More “Generate a self-signed SSL certificate: Enable LDAP over SSL” »

Windows Server

The application /Certsrv does not exist: How to configure Certificate Enrollment Web Services and Certificate Authority Web Enrolment

Posted on Christian By Christian 4 Comments on The application /Certsrv does not exist: How to configure Certificate Enrollment Web Services and Certificate Authority Web Enrolment
The application /Certsrv does not exist: How to configure Certificate Enrollment Web Services and Certificate Authority Web Enrolment

In this article, we shall discuss “The application /Certsrv does not exist: How to configure Certificate Enrollment Web Services and Certificate Authority Web Enrolment”. Active Directory Certificate Services (AD DS) is used to create certification authority and related role services that allow you to issue and manage certificates. Here is Unable to run downloaded Programs…

Read More “The application /Certsrv does not exist: How to configure Certificate Enrollment Web Services and Certificate Authority Web Enrolment” »

Windows Server

PetitPotam attack on Active Directory Certificate Services: How to mitigate NTLM Relay PetitPotam attack on AD CS

Posted on Christian By Christian No Comments on PetitPotam attack on Active Directory Certificate Services: How to mitigate NTLM Relay PetitPotam attack on AD CS
PetitPotam attack on Active Directory Certificate Services: How to mitigate NTLM Relay PetitPotam attack on AD CS

In this guide, we will discuss “PetitPotam attack on AD Certificate Services: mitigate NTLM”. Recently, Lionel Gilles, a French-based Offensive Computer Security researcher based in Paris, France published a PoC tool on NTLM Relay Attacks known as PetitPotam that exploits the MS-EFSRPC (Encrypting File Services Remote Protocol). Here is an example of such documents: NT LAN Manager:…

Read More “PetitPotam attack on Active Directory Certificate Services: How to mitigate NTLM Relay PetitPotam attack on AD CS” »

Security | Vulnerability Scans and Assessment

Create a certificate template for BitLocker Network Unlock

Posted on Christian By Christian 4 Comments on Create a certificate template for BitLocker Network Unlock
Create a certificate template for BitLocker Network Unlock

The certificate template defines the policies and rules that a CA uses when a request for a certificate is received. A certificate template adds some versatility to your PKI environment and helps reduce overhead. When creating your own template, you have multiple options that will guide the CA on how to handle incoming requests and…

Read More “Create a certificate template for BitLocker Network Unlock” »

Windows Server

How to Install and configure Active Directory Certificate Services

Posted on Christian By Christian 2 Comments on How to Install and configure Active Directory Certificate Services
How to Install and configure Active Directory Certificate Services

In this article, we shall discuss “How to Install and configure Active Directory Certificate Services”. Active Directory Certificate Services (AD DS) is used to create certification authority and related role services that allow you to issue and manage certificates. See the following interesting guides on how to import a certificate into the Trusted Root and Personal…

Read More “How to Install and configure Active Directory Certificate Services” »

Windows Server

Import certificates into Trusted Root and Personal certificate store

Posted on Christian By Christian No Comments on Import certificates into Trusted Root and Personal certificate store
Import certificates into Trusted Root and Personal certificate store

Trusted Root Certification Authorities certificate store is configured with a set of public CAs that have met the requirements of the Microsoft Root Certificate Program. Administrators can configure the default set of trusted CAs and install their own private CA for verifying software. In this article, I will show you how to Import certificates into…

Read More “Import certificates into Trusted Root and Personal certificate store” »

Windows Server