Opinions, tips, and news orbiting Microsoft
First published on TECHNET on Jul 13, 2012
On August 14, 2012, Microsoft will issue a critical non-security
update (KB 2661254)
for Windows XP, Windows Server 2003, Windows Server 2003 R2, Windows… Continue reading Blocking RSA Keys less than 1024 bits (part 2)
First published on TECHNET on Jun 18, 2012
Fabian Müller, Premier Field Engineer (PFE) in Germany, just wrote a detailed article discussing a commonly asked question:
how do I determine if a smart card was used fo… Continue reading How to determine if a smart card was used for logon
First published on TECHNET on Jun 11, 2012
Public key based cryptographic algorithms strength is determined based on the time taken to derive the private key using brute force methods. The algorithm is deemed to be strong enough wh… Continue reading RSA keys under 1024 bits are blocked
First published on TECHNET on Jun 11, 2012
There are a number of known untrusted certificates and compromised keys that have been issued by standard trusted root certification authorities. To help customers avoid interacting with t… Continue reading Announcing the automated updater of untrustworthy certificates and keys
First published on TECHNET on May 29, 2012
During my work with a customer renewing their Issuing CA’s certificate based on the steps documented in this
article
, I discovered that the Request file generated couldn’t … Continue reading Request File Can’t be Located during CA Certificate Renewal
First published on TECHNET on May 03, 2012
I was recently helping a customer deploy a SHA-256 based PKI. As part of the retirement of their old PKI, we reissued the code signing certificates used by their developers. We… Continue reading Visual Basic for Applications and SHA2
First published on TECHNET on Apr 27, 2012
Starting with Windows Vista and Windows Server 2008, the option to utilize Key Storage Providers (KSPs) in addition to Cryptographic Service Providers (CSPs) was added. These options are a… Continue reading Best Practice for Configuring Certificate Template Cryptography
First published on TECHNET on Apr 18, 2012
The Network Device Enrollment Service (NDES) whitepaper is now on the TechNet Wiki and I have already made a few updates that were requested. The old download center location has been upda… Continue reading Network Device Enrollment Service (NDES) now on the TechNet Wiki