Certificate Web Enrollment on a Server and a Misleading Error Message
The Certificate Web Enrollment component of Certificate Services is fairly helpful for allowing easy certificate request and enrollment from any computer. It does require Internet Explorer because of...
View ArticleAdvanced Certificate Services Configuration with DSC
Recently I’ve been rebuilding my Hyper-V lab environment from scratch (as part of my MCSA/MCSE studying) and decided I would completely script the process using PowerShell only. My goal was to not...
View ArticleInstalling a Two-Tier PKI using nothing but Desired State Configuration – Part 1
I am a firm believer in the concept of Infrastructure as Code. I do think technologies such as Chef and Windows PowerShell Desired State Configuration (DSC) will eventually replace ‘clickety-click’...
View ArticleInstalling a Two-Tier PKI using nothing but Desired State Configuration – Part 2
Continuing on from yesterday, the goal of this series is show how it is possible to install a two-tier Active Directory Certificate Services environment using only Desired State Configuration. In Part...
View ArticleInstall an SSL WS-Management Listener with GPO
Introduction One of the things I like to do when ever I install a new server is to enable an HTTPS/SSL WS-Management Listener on it so that I can disable the more insecure HTTP WS-Management listener....
View ArticleExport a Base-64 x.509 Cert using PowerShell on Windows 7
Exporting a Base-64 Encoded x.509 certificate using PowerShell is trivial if you have the Export-Certificate cmdlet available. However, many of the nodes I work with are Windows 7 which unfortunately...
View ArticleChange the Friendly Name of a Cert with PowerShell
While working on adding a new feature in the certificate request DSC resource, I came across this handy little trick: You can change the Friendly Name of a certificate using PowerShell. All you need to...
View Article