xdot509
A Microsoft Premier Field Engineer's blog on Cloud and Security Technologies
Update to Microsoft's SHA1 Deprecation Policy
See: https://blogs.windows.com/msedgedev/2016/04/29/sha1-deprecation-roadmap/ -Chris
Date: 05/16/2016
Administrator Workstations
I had previously published this information to my blog and accidently removed it from here....
Date: 12/27/2015
Transitioning Your PKI to SHA2
Background Hashing Algorithms Hashing Algorithms take variable input and provide a unique fixed...
Date: 12/27/2015
Secure Administrator Workstations
Are you a systems administrator for your organization? Do you have an administrative account that is...
Date: 07/23/2015
Microsoft Devices Security, Virtual Smart Cards Part 2: Deployment
Deploying Virtual Smart Cards I am going to cover how to deploy Virtual Smart Cards. In this section...
Date: 11/29/2014
Microsoft Devices Security, Virtual Smart Cards Part 1: Introduction and Trusted Platform Module (Updated 11/26/2014)
Given the recent breaches on companies both large and small, there has been an increased focus on...
Date: 11/26/2014
Windows Phone Awesomeness
Wow!!! It’s pretty awesome to see the continued evolution of Windows Phone! I have posted in...
Date: 11/24/2013
Getting Started with Windows Azure: Part 5 Getting Familiar with the Windows Azure Management Tools for Virtual Machines
Now, that we have created our first VM we want to get familiar with the Management Tools. For...
Date: 08/12/2013
Getting Started with Windows Azure: Part 4 Creating a Virtual Machine from the Gallery
So, in my previous blog posting I covered how to create your first Virtual Machine in Windows Azure...
Date: 08/12/2013
Getting Started with Windows Azure: Part 3 Creating Your First Windows Azure VM
In the previous two blog postings (Getting Started with Windows Azure: Part 1 Introduction and...
Date: 07/30/2013
Getting Started with Windows Azure: Part 2, What are Cloud Services?
What is Windows Azure? “Windows Azure is Microsoft's application platform for the public...
Date: 07/24/2013
Getting Started with Windows Azure: Part 1 Introduction
Regular visitors to my blog know that I am an expert in Public Key Infrastructure (PKI). That...
Date: 07/13/2013
PKI Disaster Recovery: Backing Up and Restoring AD Objects
In my last blog posting I covered viewing PKI related Active Directory Objects. In this blog...
Date: 07/08/2013
Upgrading your PKI to Windows Server 2012 (New Video)
This video covers the steps necessary to migrate a two tier PKI to Windows Server 2012. This video...
Date: 07/07/2013
PKI Disaster Recovery: Viewing PKI Related Active Directory Objects
Now that I have Windows 8.1 installed on both my Surface and laptop (Lenovo T430s) I have some time...
Date: 07/01/2013
Operating a PKI: Revoking Orphaned Certificates (Video)
This video covers the steps necessary to revoke orphaned certificates. Additional information on...
Date: 06/19/2013
Operating a PKI: Revoking Orphaned Certificates
Orphaned certificates are certificates that are issued by a Certification Authority, but after...
Date: 06/18/2013
Operating a PKI: SMTP Exit Module
I am back to discuss the SMTP Exit Module. The SMTP Exit Module is a very useful monitoring...
Date: 06/17/2013
PKI Tip: More Certificate Store Shortcuts
Shortly after I posted PKI Tip: Certificate Store Shortcuts, Tom Aafloen (@TomAafloen) let me know...
Date: 06/11/2013
PKI Tip: Certificate Store Shortcuts
For those that spend time managing certificates I wanted to highlight some shortcuts for certificate...
Date: 06/10/2013
Operating a PKI: CA Certificate Renewals and OCSP
There are some effects that CA Certificate Renewal has on OCSP. OCSP provides revocation checking...
Date: 06/06/2013
Operating a Windows PKI: Renewing CA Certificates
In the previous blog posting (Operating a Windows PKI: Certification Authority Certificate Lifecycle...
Date: 06/06/2013
Operating a Windows PKI: Certification Authority Certificate Lifecycle and Renewals
Certification Authority Certificate Lifecycle and Renewals In this blog post I am going to discuss...
Date: 05/27/2013
Operating a Windows PKI: Removing Expired Certificates from the CA Database
Today, I am going to discuss removing expired certificates from the CA database. Every time a...
Date: 05/10/2013
Operating a Windows PKI
In my customer engagements I get a lot of questions around what tasks an organization should be...
Date: 05/10/2013
Fun with Windows Phone 8 and NFC
I currently have a Windows Phone 8 device, specifically the HTC 8X. One the features in this...
Date: 04/14/2013
Upgrading your PKI to Windows Server 2012 Part III (Video)
This video is Part 3 in a 4 part video series on the steps required to upgrade an existing PKI from...
Date: 04/14/2013
Upgrading your PKI to Windows Server 2012 Part II (Video)
This video is Part 2 in a 4 part video series on the steps required to upgrade an existing PKI from...
Date: 04/01/2013
Upgrading your PKI to Windows Server 2012 Part I (Video)
This video is Part 1 in a 4 part video series on the steps required to upgrade an existing PKI from...
Date: 04/01/2013
New Active Directory Certificate Services (PKI) Features in Windows Server 2012
New Features Below are a list of several new features available in Active Directory Certificate...
Date: 03/29/2013
Installing a Two Tier PKI Hierarchy in Windows Server 2012 Wrap Up
After nine blog postings I have decided to wrap up the Installing a Two Tier PKI Hierarchy in...
Date: 03/22/2013
Upcoming Public Key Infrastructure (PKI) Talks
I am looking for PKI Speaking Engagements. If you are a member of a user group or a security...
Date: 03/15/2013
Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part IX, Configuring High Availability for the HTTP AIA and CDP Repositories
AIA and CDP Repositories are very important for certificate validation. The Authority...
Date: 03/15/2013
Twitter app now available for Windows 8
Twitter app now available for Windows 8. Download here:...
Date: 03/13/2013
Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part VIII, PKI Security
So, now that we have walked through configuring our Windows 2012 based PKI, let’s discuss securing...
Date: 03/08/2013
Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part VII, Enabling SSL on the Web Enrollment Website
In this installment of this blog series, I will cover enabling SSL on the Web Enrollment...
Date: 03/07/2013
Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part VI, Post Configuration of an Enterprise Subordinate Certification Authority
In the last episode of this blog series I installed an Enterprise Subordinate CA. In this episode I...
Date: 03/04/2013
Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part V, Installing an Enterprise Subordinate Certification Authority and Web Enrollment with PowerShell
In the previous blog postings for this series I covered installing the Root Certification Authority,...
Date: 02/28/2013
Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part IV, Publishing the Root CA Certificate and CRL to Active Directory
In parts I-III of this series I covered installing a Root Certification Authority as well as some...
Date: 02/25/2013
BLINK by Microsoft Research for Windows Phone 8
One issue I have had with the Cameras on Windows Phone and other Smart Phones is getting the perfect...
Date: 02/23/2013
PKI Training: Cryptography Basics Part 2
I started working on some PKI Training videos. The first training session is on Cryptography Basics....
Date: 12/16/2012
PKI Training: Cryptography Basics Part 1
I started working on some PKI Training videos. The first training session is on Cryptography Basics....
Date: 12/16/2012
Data Sense
I normally post blog posts about PKI and not phones. However, I recently received my HTC 8X, which I...
Date: 11/27/2012
PKI Design Considerations: Certificate Revocation and CRL Publishing Strategies
In this blog posting I want to talk about revocation, in particular CRLs. I will cover some...
Date: 11/26/2012
HTC 8X
I received my HTC 8X this week. It is such a beautiful phone. If you have time to stop by an...
Date: 11/25/2012
Windows Server 2008 R2: Managing and Supporting Active Directory Services workshop in Chevy Chase, MD
I will be teaching the "Windows Server 2008 R2: Managing and Supporting Active Directory Services"...
Date: 11/17/2012
Windows Server 2012 Enterprise CA, XP Compatibility Link
If you deploy an Enterprise CA on Windows Server 2012 you will have to disable a security setting to...
Date: 11/12/2012
Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part III, Post Configuration of Root Certification Authority
Introduction I wanted to follow up on the Installing a Two Tier PKI Hierarchy in Windows Server...
Date: 10/27/2012
Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part II, Installing a Root Certification Authority with the GUI
In this blog posting I will cover installing a Root Certification Authority with PowerShell in...
Date: 10/24/2012