Adding a Certificate to Trusted Publishers using Intune

Adding a Certificate to Trusted Publishers using Intune – Microsoft Tech Community

Service Fabric Clusters secured with certificates issued by DigiCert – at risk of undergoing outage

Service Fabric Clusters secured with certificates issued by DigiCert – at risk of undergoing outage – Microsoft Tech Community

Service-Fabric-Troubleshooting-Guides/Service Fabric Common Name Digicert Multiple Issuer Thumbprints.md at master · Azure/Service-Fabric-Troubleshooting-Guides · GitHub

PKI: One of the Ways of Planning Certificate Authority Lifecycle

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/one-of-the-ways-of-planning-certificate-authority-lifecycle/ba-p/1416701

TLS Handshake errors and connection timeouts? Maybe it’s the CTL engine….

https://techcommunity.microsoft.com/t5/Ask-the-Directory-Services-Team/TLS-Handshake-errors-and-connection-timeouts-Maybe-it-8217-s-the/ba-p/400501

IIS: Troubleshooting TLS / SSL communication problems when making HTTP web request in ASP.NET

Part 1:

https://techcommunity.microsoft.com/t5/IIS-Support-Blog/Troubleshooting-TLS-SSL-communication-problems-when-making-HTTP/ba-p/481273

Part 2:

https://techcommunity.microsoft.com/t5/IIS-Support-Blog/Troubleshooting-TLS-SSL-communication-problems-when-making-HTTP/ba-p/481296

Part 3:

https://techcommunity.microsoft.com/t5/IIS-Support-Blog/Troubleshooting-TLS-SSL-communication-problems-when-making-HTTP/ba-p/481441

How to configure NDES for SCEP certificate deployments in Intune

https://techcommunity.microsoft.com/t5/Intune-Customer-Success/Support-Tip-How-to-configure-NDES-for-SCEP-certificate/ba-p/455125

Extending Hardware Inventory for System Center Configuration Manager–Machine Certificates

https://blogs.technet.microsoft.com/askpfeplat/2018/10/15/extending-hardware-inventory-for-system-center-configuration-manager/

Get certificate info into a CSV by using PowerShell

https://blogs.technet.microsoft.com/heyscriptingguy/2018/05/09/get-certificate-info-into-a-csv-by-using-powershell/

When SQL has no certificate

https://blogs.technet.microsoft.com/leesteve/2018/04/24/when-sql-has-no-certificate/

PS without BS: Finding the SQL Cert and trusting it to a remote system

https://blogs.technet.microsoft.com/leesteve/2018/04/23/ps-without-bs-finding-the-sql-cert-and-trusting-it-to-a-remote-system/

TLS Handshake errors and connection timeouts? Maybe it’s the CTL engine….

https://blogs.technet.microsoft.com/askds/2018/04/10/tls-handshake-errors-and-connection-timeouts-maybe-its-the-ctl-engine/

Configure Trusted Roots and Disallowed Certificates:

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn265983(v=ws.11)#BKMK_PrepServer

TLS – SSL (Schannel SSP) Overview:

https://docs.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview

Transport Layer Security (TLS) protocol.

Cipher Suites in TLS/SSL (Schannel SSP):

https://msdn.microsoft.com/de-at/library/windows/desktop/aa374757.aspx

TLS/SSL Technical Reference:

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc784149(v%3dws.10)

CAPI2 diagnostic logging:

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-vista/cc749296(v%3dws.10)

Windows Hello for Business

https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-identity-verification

Cloud Only Deployment
Hybrid Deployments
On-premises Deployments

Windows Server 2016 Software Defined Networking: Updating the Network Controller Server certificate

https://blogs.technet.microsoft.com/networking/2018/03/19/windows-server-2016-software-defined-networking-updating-the-network-controller-server-certificate/

How will Certificate Transparency affect existing Active Directory Certificate Services environments?

https://blogs.technet.microsoft.com/pki/2018/03/12/how-will-certificate-transparency-affect-existing-active-directory-certificate-services-environments/

AD: Demystify PKI

Demystify PKI (aka AD Certificate Services) – Act I: Cryptography

Act II: Certificate Logging:

https://blogs.technet.microsoft.com/leesteve/2018/02/13/demystify-pki-act-ii-certificate-logging

PKI: which templates are built-in and which are from my company?

https://blogs.technet.microsoft.com/389thoughts/2017/05/24/pki-which-templates-are-built-in-and-which-are-from-my-company/

PKI: which templates are published where?

https://blogs.technet.microsoft.com/389thoughts/2017/05/23/pki-which-templates-are-published-where/

Enterprise Certificate Pinning

https://technet.microsoft.com/en-us/itpro/windows/keep-secure/enterprise-certificate-pinning

The Windows 10 Creators Update introduces Enterprise Certificate Pinning that enables IT Professionals to create their own key-pinning rules for their internal (enterprise) domain names

Configuration Manager 2007/2012(R2)/CB and Windows Enforcement of SHA1 Certs

https://blogs.technet.microsoft.com/configurationmgr/2017/03/13/configuration-manager-2007-and-windows-enforcement-of-sha1-certs/

PKI certificate requirements for System Center Configuration Manager:

https://docs.microsoft.com/en-us/sccm/core/plan-design/network/pki-certificate-requirements

SCEP Certificate Deployment – Troubleshooting Reference

https://blogs.msdn.microsoft.com/canberrapfe/2016/06/13/scep-certificate-deployment-troubleshooting-reference/

Microsoft SHA-1 Deprecation Plan – User’s Guide

https://blogs.technet.microsoft.com/yurikasensei/2016/11/29/sha1-users-guide/

Certificates: SHA-1 deprecation countdown

https://blogs.windows.com/msedgedev/2016/11/18/countdown-to-sha-1-deprecation/#qxPKVtcM190HC1Pm.97

https://www.neowin.net/news/microsoft-edge-and-ie11-to-block-websites-using-sha-1-certificates-next-year