Cannot install CA Certificate in subordinate CA

-

i have linux offline ca.  i have created root ca cert, published (and crl) ad.

i created server 2012 r2 subordinate ca, installed root cert in trusted root certificates container,  created new key, , created csr.

i signed subordinate ca's csr on offline root ca (the linux one) , collected new .cer file.

when open certification authority , try install certificate error "the certificate not ca certificate".

event viewer has bunch of event 10016 distributedcom errors....not sure if related.

i tried manually importing certificate , exporting pkcs#7 format....still same format.  i did notice key not part of certificate....not sure if problem.

any ideas here?  any appreciated.....

your linux ca misconfigured , did not include basic constraints extension in ca certificate. consult linux ca documentation or support community fix issue.

vadims podāns, aka powershell cryptoguy
weblog: en-us.sysadmins.lv
powershell pki module: pspki.codeplex.com
powershell cmdlet editor pscmdlethelpeditor.codeplex.com
check out new: ssl certificate verifier
check out new: powershell file checksum integrity verifier tool.



Windows Server  >  Security



Comments

Post a Comment

Popular posts from this blog

directory stack

-
witchcraft>> $algo -eq $null true witchcraft>> cd $algo.key # directory stack: --- ---------------- 0 c:\users\voodoomsr\valhala 1 c:\users\voodoomsr\valhala\witchcraft\expectopatronum 2 c:\users\voodoomsr\valhala\witchcraft\expectopatronum\comunidad 3 c:\users\voodoomsr\valhala\witchcraft\expectopatronum\comunidad\stack 4 c:\users\voodoomsr\valhala -> 5 c:\users\voodoomsr\valhala\witchcraft witchcraft>> hi all, found extrange thing don't understand. if execute set-location inexistence object list of directories. what that? i see it, can't reproduce it.   when enter you've got posted there, set-location error, because value of argument "path" null.     [string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " " mistake!. after that, check alias cd , asigned function set-locationex. fu...
Read more

PowerShell List

-
hello everyone, i'm trying list vms in scvmm i'm using get-vm -vmmserver vmm01.mydomain.tld | export-csv c:\listvm.csv but returns info each vm, return properties want, way (that know) properties using: get-vm -vmmserver vmm01.mydomain.tld | format-list -property name, owner, description, operatingsystem, cpucount, memory, virtualizationplatform, hostname, status but if add get-vm -vmmserver vmm01.mydomain.tld | format-list -property name, owner, description, operatingsystem, cpucount, memory, virtualizationplatform, hostname, status | export-csv c:\listvm.csv now have mess... any way working nice , clean? thank you ok, found solution get-vm -vmmserver vmm01.mydomain.tld | select name, owner, description, operatingsystem, cpucount, memory, virtualizationplatform, hostname, status | export-csv c:\listvm.csv thank you. Windows Server  >  ...
Read more

Dns access list

-
hello i have situation following participants: mac osx server & windows 2003 dns server   problem: the mac osx server registering ip address in dns. i not want that. question: is there way control can register in windows dns? some sort of access list. know possible bind dns server regards k you have few options available in dns regarding dynamic updates.  can set zone's dynamic updates settings 1 of following: none, nonsecure , secure, , secure only. if set none, dynamic updates not allowed, nonsecure , secure allow clients update , secure only allow authenticated systems (members of domain example). if want control updates @ record level, can modify acl record once has been created.  zone can controlled via acl (properties, security tab). visit: anitkb.com , knowledge base. Windows Server  >  ...
Read more