Certificate Authority – Terence Luk

Attempting to generate a new CSR with OpenSSL fails with: “13536:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:cryptoconfconf_lib.c:272:”

March 26, 2018

Problem You’ve downloaded OpenSSL and have began the process of generating a new CSR to submit to a Certificate authority but notice that executing the following command: req -new -newkey rsa:2048 -nodes -keyout mykey.pem -out myreq.pem … generates the following error: C:OpenSSL-Win64bin>openssl.exe OpenSSL> req -new

Skype for Business Server 2015 logs the error: “GetAndPublish web service failed due to an internal error. This may impact user sign-in.”

March 8, 2018

Problem You’ve received reports that users have experienced issues with logging into an audio conference as the leader with their PIN and noticed that your Skype for Business Server 2015 front-end server has the following error written in the Lync Server logs: Log Name: Lync

Adding SAN (Subject Alternative Name” into “Additional Attributes” field on a Microsoft Certificate Authority certificate request form does not generate a certificate with a SAN entry

September 29, 2017

Problem You’ve completed the process of creating a new keystore with a CSR from the Portecle utility: http://portecle.sourceforge.net/ Since the Portecle utility does not provide the feature to include SAN entries: https://www.sslsupportdesk.com/portecle-advanced-keystore-creation-and-manipulation-tool/ This isn’t usually a problem because it is possible to add SAN entries

Filtering out certificates with blank Common Name when using the Certificate Expiration Alerting command tool

January 31, 2017

I’ve found that many of my clients with services that rely on Microsoft Certificate Authorities deployed within the internal network have frequently asked me whether there was a way to monitor the expiry of these issued certificates and the answer to that is yes, with

Certificate template not showing up in web enrollment request options for Microsoft Certificate Authority

November 3, 2016

I ran into an interesting problem at a client this week when I had to request a new certificate from their 2-tier, standalone Root CA and subordinate Enterprise CA, certificate authority infrastructure where a certificate template that we created by duplicating the Web Server template

Unable to start Microsoft CA service after migrating from Cryptographic Service Provider (CSP) to Key Storage Provider (KSP)

May 8, 2016

Problem You’ve successfully completed the steps required to migrate your Microsoft CA (Certificate Authority) from Cryptographic Service Provider (CSP) to Key Storage Provider (KSP) after performing the steps outlined in the following TechNet guide: Migrating a Certification Authority Key from a Cryptographic Service Provider (CSP)

Upgrading Microsoft CA (Certification Authority) from SHA1 to SHA256 hash algorithm

May 3, 2016

I’ve recently been asked by many of my colleagues and clients about what they would need to do to upgrade their internal Microsoft CA from the deprecating SHA1 hash algorithm. The process could be short or long depending on the Cryptographic Settings that the CA

Generating SSL certificate with OpenSSL for Cisco Wireless Controller

March 17, 2015

I recently had to use OpenSSL to generate a CSR and complete the certificate request for a Cisco Wireless Controller and noticed that the Cisco provided guide did not include some steps that caused errors to be thrown so I thought it would be good

Notes when working with Microsoft CA (Certificate Authority) services

December 10, 2014

I recently had to work with a Microsoft support engineer to troubleshoot an Active Directory Certificate Services issue and managed to write down a few commands he used during the troubleshooting process and thought I’d write a blog post so I can refer to them

Blog

Attempting to generate a new CSR with OpenSSL fails with: “13536:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:cryptoconfconf_lib.c:272:”

Skype for Business Server 2015 logs the error: “GetAndPublish web service failed due to an internal error. This may impact user sign-in.”

Adding SAN (Subject Alternative Name” into “Additional Attributes” field on a Microsoft Certificate Authority certificate request form does not generate a certificate with a SAN entry

Filtering out certificates with blank Common Name when using the Certificate Expiration Alerting command tool

Certificate template not showing up in web enrollment request options for Microsoft Certificate Authority

Unable to start Microsoft CA service after migrating from Cryptographic Service Provider (CSP) to Key Storage Provider (KSP)

Upgrading Microsoft CA (Certification Authority) from SHA1 to SHA256 hash algorithm

Generating SSL certificate with OpenSSL for Cisco Wireless Controller

Notes when working with Microsoft CA (Certificate Authority) services

Hello! My name is Terence Luk and welcome to my blog.

Follow me:

Categories

Subscribe to the mailing list to receive posts updates!

Categories

Recent Posts

Web Application Update: Adding identity information of the user who has uploaded a file to a Storage Account

Configuring a Logic App to run an Azure AI Search Service Indexer to index new documents for RAG