#certificate-authority

Fix: Cost of getting in-house certificate authority trusted #it #dev #answer

Cost of getting in-house certificate authority trusted

My company has an in-house certificate authority that is currently self-signed. Since we want to start using it for external SSL and secure email to our customers, we need to get it trusted.

Does anyone have a ballpark as to what it costs to get trusted root certificate for an in-house PKI? 4 figures? 5 figures? 6 figures? We employ between…

How-to: Purpose behind subordinate Certificate Authorities #development #dev #fix

Purpose behind subordinate Certificate Authorities

At my place of employment, we are setting up a PKI infrastructure using Microsoft products. We have a totally clean slate here and want to have a good start. We’re wondering why anyone would set up subordinate CA’s. Why not use the root CA for everything? What advantages exist for setting up subordinate CA’s?

Thanks.

Answer [by Mark Sutton]:…

Resolved: How to secure your CA's private key? #dev #fix #answer

How to secure your CA’s private key?

I’m about to implement my own Certification Authority (CA) for interal use only.

Now there is a problem, that the CA private should never ever be exploited. So right now the private key is encrypted.

What else could be done to enhance the security of the private key?

Answer [by andol]: How to secure your CA’s private key?

One big gain is to keep the private…

Solution: Outlook Encrypted Emails boo boo #solution #programming #dev

Outlook Encrypted Emails boo boo

I just reinstalled my Windows OS 7 and forgot to backup my Email Certificate for Outlook 2010 beforehand. Now I can’t read any encrypted emails. When I try, it says “Cannot open this item. Your Digital ID name cannot be found by the underlying security system.”

The certificate was issued by our internal Windows Certificate Authority and I can see it still in…

How to: Can MS Certificate Services be a Subordinate to CA created with OpenSSL #computers #fix #dev

Can MS Certificate Services be a Subordinate to CA created with OpenSSL

I want to setup a enterprise certification authority for my domain. So I can issue certificates for various purposes. I would like to follow the best practice of having an offline CA as the root, and setup my enterprise CA as a subordinate. But it seems silly to license a fully copy of Windows for this task.

What I am hoping…

Solution: Windows 2008 R2 CA and auto-enrollment: how to get rid of >100,000 issued certificates? #dev #it #computers

Windows 2008 R2 CA and auto-enrollment: how to get rid of >100,000 issued certificates?

The basic problem I’m having is that I have >100,000 useless machine certificates cluttering up my CA, and I’d like to delete them, without deleting all certs, or time jumping the server ahead, and invalidating some of the useful certs on there.

This came about as a result of accepting a couple defaults with…

How to: Adding new root/enterprise CA without disturbing existing one? #solution #programming #development

Adding new root/enterprise CA without disturbing existing one?

I am looking at installing a new AD-integrated enterprise certificate authority structure, but have discovered that somebody already has created a CA (mostly used for SSL on internal websites).

I want to build the new structure according to best practices, by creating an offline root, authorizing several subordinate CAs for…