Certificate Archives

Let’s encrypt generate a PFX with IIS

This tutorial explains how to generate a certificate in pfx format with Let’s Encrypts and IIS.

Active Directory Right Management Services: Installation and Configuration

AD RMS (Active Directory Right Management) is a Windows Server service that provides extended rights management for certain files. The system is similar to the DRM protection that protects intellectual property. In internal use, AD RMS extends NTFS security rights by limiting actions on a Word file by preventing the printing or saving of a …

Enterprise CA: Installation and Configuration with Windows Server

In this tutorial, I will explain how to set up an enterprise CA that is linked to an Active Directory, unlike the stand-alone CA. This type of CA allows you to automate certificate generation with direct submission to the CA. Automatically issue computer and user certificates to, for example, secure VPN access with Windows NPS. …

GPO: Deploy a certificate

This tutorial explains how to deploy a certificate using a Group Policy (GPO).

RDS Farm: Configure SSL Certificates

When deploying an RDS farm, it may be necessary to configure SSL certificates for the following services: RDS gateway. WEB access. Service Broker. If you use self-signed certificates for services, you will not need to configure the certificates. Some components such as the HTML5 client require a certificate that has been generated by a certificate …

Setting up a certification authority under Windows 2012R2 / 2016

Presentation

A Certificate Authority (CA) can issue certificates for internal internet sites, RDS connections …

The advantage of having a CA is having to deploy a single certificate on the computers, and some Windows services require certificates from a CA to work:

RemoteApp
Client RDP HTML5

On Windows, there are two types of CAs (summary):

Company: CA linked to an Active Directory that can issue certificates for domain members (posts / users).
Standalone: AC that can be a member or not of a domain that issues certificates of the generations of “manual request”.