<?xml version="1.0" encoding="utf-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>RDR-IT - Certificate</title><link>https://rdr-it.com/en/tag/certificate/</link><description>System administration, virtualization, security and tools for IT professionals.</description><language>en-US</language><lastBuildDate>Tue, 13 Oct 2026 10:43:53 +0000</lastBuildDate><atom:link href="https://rdr-it.com/en/tag/certificate/index.xml" rel="self" type="application/rss+xml"/><item><title>Generate a PFX certificate from a key and a .crt file</title><link>https://rdr-it.com/en/generate-a-pfx-certificate-from-a-key-and-a-crt-file/</link><pubDate>Wed, 09 Sep 2026 04:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/generate-a-pfx-certificate-from-a-key-and-a-crt-file/</guid><description>In this tutorial, I’ll explain how to convert a certificate to PFX format from .key and .crt files.
To convert a certificate to PFX format, you’ll need OpenSSL. In this …</description></item><item><title>Generate a Let’s Encrypt Wildcard Certificate with Certbot and Cloudflare (DNS-01)</title><link>https://rdr-it.com/en/generate-a-lets-encrypt-wildcard-certificate-with-certbot-and-cloudflare-dns-01/</link><pubDate>Wed, 19 Aug 2026 04:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/generate-a-lets-encrypt-wildcard-certificate-with-certbot-and-cloudflare-dns-01/</guid><description>Step-by-step tutorial for generating a Let’s Encrypt wildcard certificate with Certbot using the DNS-01 challenge for a domain hosted on Cloudflare.</description></item><item><title>ADFS: How to replace the SSL certificate</title><link>https://rdr-it.com/en/adfs-how-to-replace-the-ssl-certificate/</link><pubDate>Wed, 17 Jun 2026 04:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/adfs-how-to-replace-the-ssl-certificate/</guid><description>In this tutorial, I’ll explain how to replace the SSL certificate on ADFS (Active DirectoryFederation Services). This step is necessary when renewing an expired …</description></item><item><title>Windows Server 2025: Install the AD CS role - Enterprise Certification Authority</title><link>https://rdr-it.com/en/windows-server-2025-install-the-ad-cs-role-enterprise-certification-authority/</link><pubDate>Wed, 20 May 2026 04:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/windows-server-2025-install-the-ad-cs-role-enterprise-certification-authority/</guid><description>In this tutorial, I will explain how to install the AD CS (Active DirectoryCertificate Services) role, which allows you to set up a certificate authority that will enable …</description></item><item><title>Sign RDP files and secure RDS farms after the April 2026 Windows updates</title><link>https://rdr-it.com/en/sign-rdp-files-and-secure-rds-farms-after-the-april-2026-windows-updates/</link><pubDate>Tue, 05 May 2026 07:45:11 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/sign-rdp-files-and-secure-rds-farms-after-the-april-2026-windows-updates/</guid><description>Since April 2026, Windows has required the signature of RDP files and an enhanced configuration of RDS farms. Find out how to correct errors, sign your RDP files and …</description></item><item><title>Active Directory: Configuring the LDAPS Protocol</title><link>https://rdr-it.com/en/active-directory-configuring-the-ldaps-protocol/</link><pubDate>Wed, 08 Apr 2026 04:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/active-directory-configuring-the-ldaps-protocol/</guid><description>In this tutorial, I will explain how to configure the LDAPS protocol in an environment Active Directory with secure connections to domain controllers using an SSL …</description></item><item><title>Add and assign an SSL certificate on Exchange 2016 and 2019</title><link>https://rdr-it.com/en/add-and-assign-an-ssl-certificate-on-exchange-2016-and-2019/</link><pubDate>Wed, 06 Aug 2025 04:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/add-and-assign-an-ssl-certificate-on-exchange-2016-and-2019/</guid><description>Learn how to add and assign an SSL certificate on Exchange Server 2016 to secure communications between your users and the email server</description></item><item><title>Create a sub-certificate authority with AD CS</title><link>https://rdr-it.com/en/create-a-sub-certificate-authority-with-ad-cs/</link><pubDate>Wed, 25 Dec 2024 05:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/create-a-sub-certificate-authority-with-ad-cs/</guid><description>In this tutorial, I will explain how to create a sub CA with Windows AD CS.
Sub-CAs are underused on firewalls when SSL decryption is implemented, generating a sub-CA …</description></item><item><title>Ubuntu: add a certificate from an internal certificate authority</title><link>https://rdr-it.com/en/ubuntu-add-a-certificate-from-an-internal-certificate-authority-40287/</link><pubDate>Wed, 13 Sep 2023 04:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/ubuntu-add-a-certificate-from-an-internal-certificate-authority-40287/</guid><description>In this tutorial, I will show you how to add the certificate of an internal CA on an Ubuntu machine.
In business, we often use an Enterprise Certification Authority, …</description></item><item><title>PowerShell: sign scripts</title><link>https://rdr-it.com/en/powershell-sign-scripts/</link><pubDate>Wed, 30 Aug 2023 04:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/powershell-sign-scripts/</guid><description>In this tutorial, I will explain how to sign your scripts. Before going into the subject, we will see why signing the scripts, the main reason is security. If your …</description></item><item><title>Windows Server: disable a cipher suite</title><link>https://rdr-it.com/en/windows-server-disable-a-cipher-suite/</link><pubDate>Wed, 02 Nov 2022 05:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/windows-server-disable-a-cipher-suite/</guid><description>In this tutorial, I will walk you through how to disable a cipher suite also call cipher.
If you arrive on this tutorial by a search engine, there is a good chance that …</description></item><item><title>Nginx: generate a Let's Encrypt certificate</title><link>https://rdr-it.com/en/nginx-generate-a-lets-encrypt-certificate/</link><pubDate>Wed, 18 May 2022 04:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/nginx-generate-a-lets-encrypt-certificate/</guid><description>After seeing how to install and configure Nginx as a reverse proxy and harden security with Crowdsec , I will explain in this tutorial how to generate a Let’s Encrypt …</description></item><item><title>PFX certificate: extract the certificate and the private key</title><link>https://rdr-it.com/en/pfx-certificate-extract-the-certificate-and-the-private-key/</link><pubDate>Wed, 11 May 2022 04:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/pfx-certificate-extract-the-certificate-and-the-private-key/</guid><description>In this tutorial, I will explain how to extract the certificate and the private key from a certificate in PFX format with OpenSSL.
The easiest way to use OpenSSL is to …</description></item><item><title>Exchange : install and configure an SSL certificate</title><link>https://rdr-it.com/en/exchange-install-and-configure-an-ssl-certificate/</link><pubDate>Fri, 09 Apr 2021 04:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/exchange-install-and-configure-an-ssl-certificate/</guid><description>Overview In this tutorial, I will explain how to install a certificate on Exchange 2013/2016/2019 and how to assign it to the different services.
There are two ways to do …</description></item><item><title>Certify The Web: Easily Generate Let's Encrypt Certificates for IIS</title><link>https://rdr-it.com/en/certify-the-web-easily-generate-lets-encrypt-certificates-for-iis/</link><pubDate>Wed, 27 Jan 2021 05:30:00 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/certify-the-web-easily-generate-lets-encrypt-certificates-for-iis/</guid><description>In this tutorial, I will tell you how to easily generate Let’s Encrypt certificates for IIS with Certify The Web software.
I have already covered the topic of Let’s …</description></item><item><title>Active Directory Right Management Services: Installation and Configuration</title><link>https://rdr-it.com/en/active-directory-right-management-services-installation-and-configuration/</link><pubDate>Wed, 30 Oct 2019 06:08:42 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/active-directory-right-management-services-installation-and-configuration/</guid><description>Introduction AD RMS (Active Directory Right Management) is a Windows Server service that provides extended rights management for certain files. The system is similar to …</description></item><item><title>GPO: Deploy a certificate</title><link>https://rdr-it.com/en/gpo-deploy-a-certificate/</link><pubDate>Tue, 09 Jul 2019 09:38:07 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/gpo-deploy-a-certificate/</guid><description>This tutorial explains how to deploy a certificate using a Group Policy (GPO).</description></item><item><title>RDS Farm: Configure SSL Certificates</title><link>https://rdr-it.com/en/rds-farm-configure-ssl-certificates/</link><pubDate>Thu, 28 Feb 2019 03:00:12 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/rds-farm-configure-ssl-certificates/</guid><description>When deploying an RDS farm , it may be necessary to configure SSL certificates for the following services:
RDS gateway. WEB access. Service Broker. If you use self-signed …</description></item><item><title>Stand-alone certification authority: installation on Windows Server</title><link>https://rdr-it.com/en/setting-up-a-certification-authority-under-windows-2012r2-2016/</link><pubDate>Mon, 03 Dec 2018 00:01:47 +0000</pubDate><guid isPermaLink="true">https://rdr-it.com/en/setting-up-a-certification-authority-under-windows-2012r2-2016/</guid><description>Presentation A Certificate Authority (CA) can issue certificates for internal internet sites, RDS connections …
The advantage of having a CA is having to deploy a single …</description></item></channel></rss>