Retired Microsoft Blog disclaimer

This directory is a mirror of retired "Windows PKI Team" TechNet blog and is provided as is. All posting authorship and copyrights belong to respective authors.

Posts on this page:

Original URL: https://blogs.technet.microsoft.com/pki/2011/10/07/does-enterprise-pki-pkiview-support-ocsp/
Post name: Does Enterprise PKI (PKIVIEW) support OCSP?
Original author: Kurt L Hudson MSFT
Posting date: 2011-10-07T08:38:00+00:00


A common question from certification authority administrators is "Does Enterprise PKI (PKIView) support OCSP?" Yes, the Microsoft Management Console (MMC) Enterprise PKI (PKIView), supports the When setting up Certificate Extensions, you must ensure that the Include in the AIA extension of issued certificates is not selected. That option is located in the Extensions tab of the CA Properties in the Certification Authority console. The correct configuration for an http path specifying the AIA for an Online Responder is shown in the following figure.This question has alsobeen added to the Active Directory Certificate Services FAQ at http://social.technet.microsoft.com/wiki/contents/articles/1587.aspx

Original URL: https://blogs.technet.microsoft.com/pki/2011/09/28/updated-requirements-for-a-windows-server-2008-r2-domain-controller-certificate-from-a-3rd-party-ca/
Post name: Updated requirements for a Windows Server 2008 R2 domain controller certificate from a 3rd party CA
Original author: Kurt L Hudson MSFT
Posting date: 2011-09-28T13:41:00+00:00


Ingolfur has written a blog post as well as a TechNet Wiki article describing how a Windows Server 2008 R2 certification authority (CA) parses certificates, especially those from a third-party (3rd party) non-Microsoft CA.He also covers the Key Distribution Center (KDC) enhanced key usage(EKU) object identifiers (OIDs) and in the blog post KDC event ID 29.

TechNet Wiki article: Updated requirements for a Windows Server 2008 R2 domain controller certificate from a 3rd party CA

http://social.technet.microsoft.com/wiki/contents/articles/updated-requirements-for-a-windows-server-2008-r2-domain-controller-certificate-from-a-3rd-party-ca.aspx

Blog post: Smartcard logon using certificates from a 3rd party on a Domain Controller and KDC Event ID 29

Original URL: https://blogs.technet.microsoft.com/pki/2011/09/14/windows-8-developer-preview-and-ad-cs-pki-cannot-get-a-certificate-from-web/
Post name: Windows 8 Developer Preview and AD CS / PKI: Cannot Get a Certificate from Web
Original author: Kurt L Hudson MSFT
Posting date: 2011-09-14T05:25:00+00:00


If you are using Windows Developer Previewand have difficulty obtaining or downloading a certificateusing Internet Explorer 10 (IE 10), try using compatibility mode. Turning on Compatibility View is the same in IE10 as in IE9, so you can follow the instructions at "Why do some web pages look incorrect in Internet Explorer 9?" to make the chage. This tip was added to the Windows Developer Preview release notes as well.

If you are interested in general Windows 8 information as it is breaking through the technical magazines, Windows IT Pro has A Big Week for Microsoft: Windows Server 8 and Windows 8 and Redmond Magazine has: Windows 8 Details Unveiled at Build Event.

Original URL: https://blogs.technet.microsoft.com/pki/2011/08/18/internet-explorer-9-and-certificate-enrollment-using-certificate-authority-web-enrollment/
Post name: Internet Explorer 9 and Certificate Enrollment using Certificate Authority Web Enrollment
Original author: Kurt L Hudson MSFT
Posting date: 2011-08-18T00:51:18+00:00


If you run into an issue where you are unable to download or save certificates using Internet Explorer 9 (IE 9) and the Certificate Authority Web Enrollment service of a certification authority, you should be sure to disable the enhanced security option of Internet Explorer. See TechNet Wiki article: http://social.technet.microsoft.com/wiki/contents/articles/you-cannot-download-ca-certificate-from-web-enrollment-pages.aspx for more details.