Finally – the moment you’ve been waiting for!  Issuing Certificates!  We’re going to cover three enrollments for our three different certificate templates created in Part 4.

In this part of the series, we’re going to start getting ready to issue some certificates, and we’re going to do that by creating some Certificate Templates.  This can be done from any workstation that has domain access and has the Certificate Templates console installed (part of the Remote Server Administration Tools), but we’re going to do it from our Intermediate Server in this lab since we know everything we need is already installed there from Part 2 of the series.

In this post we’re going to setup the trust for your Root Certificate in your environment. If we think about what we talked about back in Part 1 of this series, you’ll remember that once we trust the guy at the top, we trust anyone down the chain as well.  By trusting your Root Certificate, we automatically trust your intermediate certificate and anyone who your intermediate authority generates a certificate for.

I'd like to tie together everything we've done so far.  If you're following along, you've probably gotten through standing up two servers in a lab environment in under 30 minutes, but perhaps without understanding the implications of the changes you've made along the way. We're not going to make any changes to your environment in this part of the series, so you're welcome to skip it and you'll still end up with a perfectly valid environment, but I feel like there might be some value here for you.

In this post, we'll stand up a subordinate Certificate Authority server.  This will be your domain joined, always online server that will actually hand out the certificates to clients.

In this post I'm going to walk through the steps necessary to standup a pretty basic Certificate Authority (CA) within your on-premises Active Directory environment.  This is an introduction to CA only, and I'll admit that all of my knowledge is from working with consultants to stand environments up and from reading Microsoft's documentation.

Quick post today because I couldn't find this error anywhere online. I'm running Configuration Manager 2002 and was exporting an application and was getting this error thrown in Powershell: Export-CMApplication : The specified server cannot perform the requested operation. After some digging around, I realized it was …

I wrote the following script to find and list attached USB Mass Storage Devices and determine the disks and partitions associated with them. 1$usbKeysAttached = Get-PnpDevice -Class USB -Status OK -FriendlyName "USB Mass Storage Device" 2 3$aAttachedDisks = @() 4 5ForEach($key in $usbKeysAttached) { 6 $pnpProperties = …

So, my DS218+ recently died and I picked up a new DS918+. After setting it up with two new 4TB disks, I thought I was going to be able to put my two old 2 TB disks that were setup as a mirror in my old system and just copy the data over, but unfortunately that's not an option. The solution in the community seemed to be …

The following 60-second video is the one I demoed at MMS Jazz 2019 to show how to quickly edit a Microsoft Doc without needing to understand Git command line tools or using VSCode.