{"id":983,"date":"2018-02-15T17:33:37","date_gmt":"2018-02-15T15:33:37","guid":{"rendered":"https:\/\/www.boettrich.info\/blog\/?p=983"},"modified":"2019-02-11T22:44:51","modified_gmt":"2019-02-11T20:44:51","slug":"windows-enterprise-ca-certificate-services","status":"publish","type":"post","link":"https:\/\/www.boettrich.info\/blog\/beitrag\/windows-enterprise-ca-certificate-services\/","title":{"rendered":"Windows Enterprise CA &#8211; Certificate Services"},"content":{"rendered":"\n<p><a href=\"https:\/\/blogs.technet.microsoft.com\/pki\/2013\/08\/27\/renew-web-server-ssl-certificates-automatically\/\" target=\"_blank\" rel=\"noopener\">Auto-Renewal of Multidomain- \/ SAN-Certificates via GPO<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/blogs.technet.microsoft.com\/mspfe\/2012\/12\/27\/how-to-avoid-having-users-enroll-for-multiple-certificates\/\" target=\"_blank\" rel=\"noopener\">How to Avoid Having Users Enroll for Multiple Certificates<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/social.technet.microsoft.com\/Forums\/ie\/en-US\/7d7e35d7-0126-4d8b-823b-c2628ff76df5\/multiple-issuing-ca-at-different-geographical-location?forum=winserversecurity\" target=\"_blank\" rel=\"noopener\">Multiple CAs in AD-Domain<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/arstechnica.com\/civis\/viewtopic.php?f=17&amp;t=1372343\" target=\"_blank\" rel=\"noopener\">Discussion about how to issue certs with SAN &#8211; do not always use &#8222;EDITF_ATTRIBUTESUBJECTALTNAME2&#8220;<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/blog.css-security.com\/blog\/hidden-dangers-certificate-subject-alternative-names-sans\" target=\"_blank\" rel=\"noopener\">Why not use &#8222;EDITF_ATTRIBUTESUBJECTALTNAME2&#8220;<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/blogs.technet.microsoft.com\/russellt\/2016\/04\/29\/get-crlfreshness\/\">https:\/\/blogs.technet.microsoft.com\/russellt\/2016\/04\/29\/get-crlfreshness\/<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/github.com\/Crypt32\/PSPKI\" target=\"_blank\" rel=\"noopener\">Very usefull PowerShell Module for working with CAs<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/blog.abatishchev.ru\/2014\/07\/15\/enrollment-policy-server-uri\/\" rel=\"bookmark\">Certificate enrollment policy server URI&nbsp;format<\/a><br>\n<a href=\"https:\/\/social.technet.microsoft.com\/Forums\/windowsserver\/en-US\/8bc5b858-c699-4e60-86e0-008729dc936e\/ldap-uri-for-certificate-enrollment-policy?forum=winserverGP\" target=\"_blank\" rel=\"noopener\">LDAP URI for Certificate Enrollment Policy<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/social.technet.microsoft.com\/wiki\/contents\/articles\/7734.certificate-enrollment-web-services-in-active-directory-certificate-services.aspx\" target=\"_blank\" rel=\"noopener\">Certificate Enrollment Web Services in Active Directory Certificate Services<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/social.technet.microsoft.com\/Forums\/windowsserver\/en-US\/859710ed-e581-4b4b-8337-bc62b8ad2146\/multiple-windows-2012-r2-subordinate-issuing-cas-how-do-i-make-one-preferred-issuing-ca?forum=winserversecurity\" target=\"_blank\" rel=\"noopener\">Very useful information on having more than one issuing CA in specific AD<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/windoh.wordpress.com\/2011\/04\/23\/crl-caching-in-windows-and-a-little-bit-about-ocsp-caching-too\/\" target=\"_blank\" rel=\"noopener\">Write-Up and thoughts about CRLs and OCSP<\/a><\/p>\n\n\n\n<p><strong>CP &amp; CPS<\/strong><\/p>\n\n\n\n<p><a href=\"https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2003\/cc780454(v=ws.10)\">https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2003\/cc780454(v=ws.10)<\/a><\/p>\n\n\n\n<p><strong>SCEP \/ NDES &#8211; getting Linux in the MS CA<\/strong><\/p>\n\n\n\n<p><a href=\"https:\/\/blogs.technet.microsoft.com\/jeffbutte\/2016\/12\/16\/236\/\">https:\/\/blogs.technet.microsoft.com\/jeffbutte\/2016\/12\/16\/236\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Auto-Renewal of Multidomain- \/ SAN-Certificates via GPO How to Avoid Having Users Enroll for Multiple Certificates Multiple CAs in AD-Domain Discussion about how to issue certs with SAN &#8211; do not always use &#8222;EDITF_ATTRIBUTESUBJECTALTNAME2&#8220; Why not use &#8222;EDITF_ATTRIBUTESUBJECTALTNAME2&#8220; https:\/\/blogs.technet.microsoft.com\/russellt\/2016\/04\/29\/get-crlfreshness\/ Very usefull PowerShell Module for working with CAs Certificate enrollment policy server URI&nbsp;format LDAP URI for&hellip;&nbsp;<a href=\"https:\/\/www.boettrich.info\/blog\/beitrag\/windows-enterprise-ca-certificate-services\/\" rel=\"bookmark\">Weiterlesen &raquo;<span class=\"screen-reader-text\">Windows Enterprise CA &#8211; Certificate Services<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-983","post","type-post","status-publish","format-standard","hentry","category-beitrag"],"_links":{"self":[{"href":"https:\/\/www.boettrich.info\/blog\/wp-json\/wp\/v2\/posts\/983","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.boettrich.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.boettrich.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.boettrich.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.boettrich.info\/blog\/wp-json\/wp\/v2\/comments?post=983"}],"version-history":[{"count":17,"href":"https:\/\/www.boettrich.info\/blog\/wp-json\/wp\/v2\/posts\/983\/revisions"}],"predecessor-version":[{"id":1024,"href":"https:\/\/www.boettrich.info\/blog\/wp-json\/wp\/v2\/posts\/983\/revisions\/1024"}],"wp:attachment":[{"href":"https:\/\/www.boettrich.info\/blog\/wp-json\/wp\/v2\/media?parent=983"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.boettrich.info\/blog\/wp-json\/wp\/v2\/categories?post=983"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.boettrich.info\/blog\/wp-json\/wp\/v2\/tags?post=983"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}