Deploying certificates and CRL in a domain or a forest in an automated fashion can done using GPO like many other settings. However a less well-known possibility is to use the certutil -dspublish command. Let’s review how it works. When using that option, certificates are stored in one of the […]
In a previous post, I’ve blogged about how to install a Windows root CA, and we did a lot of customization. Let’s see how we can save this configuration using an handy script. What is a backup of a Windows CA Configuration made of? You may also notice that this […]
As opposed to other roles installation, a Windows Root CA installation is not a simple question of clicking next and finish buttons. Since the root CA will be offline most of the time, you can use a virtual machine. HOwever, please note that your hypervisor administrators must be considered as […]
In enterprise environments, non-Windows PKI solutions are not uncommon. Such as product is PKI from Verizon CyberTrust called UniCERT, or UniCERT PKI for short. Although the product delivers standard PKI features, like many Unix-Java based products it has many limitations when it comes to integration into the Windows world. […]
