PKI – Page 2 – shell{&}co

List AD domain controller KDC certificates

Kerberos uses certificates to encrypt communication between the Kerberos client and the Kerberos Key Distribution Center (KDC). If you’re domain controllers use certificate for KDC you can list them by runnning this script: $domains = (Get-ADForest).domains $dcs = (Get-ADForest).globalcatalogs $list

Certificate renewal with Powershell

With the following function, it is possible to renew a Local machine certificate by providing the certificate thumbprint to the function. To simply get a certificate thumbprint, you can run this command: gci -path Cert:\LocalMachine\My | select Thumbprint If you

Revoke a certificate that has specific properties

In the next days, I will show you how to perform specific tasks on your Microsoft PKI using Powershell. In this post, you will be able to revoke a certificate that matches your criteria. In the following example, I will

Submit an openssl request file to a Microsoft PKI with certreq

This procedure will show you how to generate a certificate with this following requirements : a linux web server : a certificate request file is generated with openssl command a Microsoft Certificate Authority that will issue a certificate Follow these

PKI : Recover the certificate private key

PKI : Recover the certificate private key with Microsoft tools If a certificate does not contain the private key, the following part will be blank: Follow these steps to include the private key in the certificate file : Snap-In Configuration

Monitor certificate expiration

UPDATE : – new HTML template – added two informations : Root and Subordinate CA CRL expiration dates in the report Purpose : This project is a simple script to monitor the certificate expiration. When a certificate is about to