Tag: x.509

Windows Server 2012 R2 Two-Tier PKI CA Pt. 3

Now that we have our Windows Server 2012 R2 certificate authority configured in Part 1, and our subordinate setup in Part 2, now we should setup autoenrollment and secure the subordinate's web certificate services with SSL. Autoenrollment is where domain joined Windows computers are automatically issued a computer certificate. Services such...

Windows Server 2012 R2 Two-Tier PKI CA Pt. 2

Now that our root Windows Server 2012 R2 certificate authority is installed and published to Active Directory from Part 1, it is time to bring online our subordinate CA. The subordinate CA will be our online issuing CA, since it will be the CA which issues all certificates, be they for users,...

Windows Server 2012 R2 Two-Tier PKI CA Pt. 1

Windows Server 2012 R2 Two-Tier PKI CA Pt. 1

While I have written a number of articles focused on SSL certificates and templates, I have not done a mini-series on how to actually install a Windows Certificate Authority. For this series I'm using Windows Server 2012 R2, but the steps are pretty much identical for Windows Server 2012. Microsoft...

vSphere 5.5 Install Pt. 9: Offline SSL Minting

Not everyone has an online Microsoft Certificate Authority, or maybe my toolkit script has issues in your environment. So in this installment we will go over manual SSL minting. By that I mean we will use my Toolkit script to create the CSRs, you will download the certificates yourself, then run my...

vSphere 5.5 Install Pt. 6: Certificate Template

Now that you understand what type of SSL certificates you need and how many vCenter 5.5 requires, we need to create a Certificate Authority template that will mint proper certificates. You may very well be able to get away with the Microsoft "Web server" template, but it is missing a few...