Skip to main content

Bartosz Czerwiński's Library tagged security →  View Popular

25 Dec 09

Using a non-MS CA to create EFS and File Recovery certificates

How to create File Recovery certificates using OpenSSL and MS makecert.exe tool.

www.aaronpalermo.com/...5 - Preview

security ssl openssl microsoft windows administration howto

    • The pcks12 format includes public and private keys for the certificate, and is easy to import and use in Windows.



      1. openssl req -new -days 365 -nodes -keyout Finished/username-key.pem -out Meta/username-req.pem -config Meta/efs-fr.cnf
      2. openssl ca -policy policy_anything -in Meta/username-req.pem -out Finished/username-crt.pem -extfile Meta/efs-fr.cnf
      3. openssl pkcs12 -export -in Finished/username-crt.pem -inkey Finished/username-key.pem -certfile cacert.pem -out Finished/username.p12
20 Dec 09

Smart Card - Video Tutorials

Video tutorials that shows how to set up Smart Card environment.

www.usasmartcard.com/...video-tutorials - Preview

smartcard security windows howto administration

Guidelines for enabling smart card logon in Windows

Guidelines for enabling smart card logon with third-party certification authorities in Windows Server Active Directory Service.

support.microsoft.com/281245 - Preview

smartcard security windows activedirectory howto administration

    • The smart card certificate has specific format requirements:
      • The CRL Distribution Point (CDP) location (where CRL is the Certification Revocation List) must be populated, online, and available. For example:

        [1]CRL Distribution Point

        Distribution Point Name:

        Full Name:

        URL=http://server1.name.com/CertEnroll/caname.crl
      • Key Usage = Digital Signature
      • Basic Constraints [Subject Type=End Entity, Path Length Constraint=None] (Optional)
      • Enhanced Key Usage =
        • Client Authentication (1.3.6.1.5.5.7.3.2)

          (The client authentication OID) is only required if a certificate is used for SSL authentication.)
        • Smart Card Logon (1.3.6.1.4.1.311.20.2.2)
        • Subject Alternative Name = Other Name: Principal Name= (UPN). For example:

          UPN = user1@name.com

          The UPN OtherName OID is : "1.3.6.1.4.1.311.20.2.3"

          The UPN OtherName value: Must be ASN1-encoded UTF8 string
        • Subject = Distinguished name of user. This field is a mandatory extension, but the population of this field is optional.
18 Dec 09

Smart Card - Libraries

Many helpfull tips, articles and reference books about Smart Card PKI deployment in Microsoft products.

www.usasmartcard.com/...libraries - Preview

security smartcard windows howto reference

SmartCard Infrastructure MSDN

Bloog about SmartCard Infrastructure according to Microsoft Products.

blogs.msdn.com/shivaram - Preview

security smartcard windows howto

17 Dec 09

PKCS

05 Nov 09

Home (Hard Token Management Framework)

Hard Token Management Framework - complete environment for Smart Card and/or USB dongles lifecycle management framework.

www.hardtokenmgmt.org - Preview

security smartcard administration tools software digitalsignature management

1 - 20 of 34 Next ›
Showing 20▼ items per page

Selected Tags

Related Tags

Sponsored Links

Ads by Google

Diigo is about better ways to research, share and collaborate on information. Learn more »

Join Diigo