SELFSSL.exe - can you create a Domain Controller certificate?

As the title asks really.  Rather than setting up CA's, can you use selfssl.exe to create domain controller certificates?

if you are not using certificates, then why not just delete certificates that cause warnings? Old trusted CA can be propagated from active directory. See this article:
http://social.technet.microsoft.com/wiki/contents/articles/3527.how-to-decommission-a-windows-enterprise-certification-authority-and-how-to-remove-all-related-objects.aspx
you need to perform only step 6 and 7.
My weblog: en-us.sysadmins.lv
PowerShell PKI Module: pspki.codeplex.com
PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
Check out new: SSL Certificate Verifier
Check out new:
PowerShell FCIV tool.

Similar Messages

  • Can't create Exchange domain-signed certificate

    Okay, I need to figure out why this is happening. We have our own domain certificate authority, and when I run a domain certificate request from any of my IIS servers, it hands out certificates just fine. But when I try to submit a request for an exchange
    certificate directly in the MMC, I get the following error:
    "The request contains no certificate template information. 0x80094801 (-2146875391)
    Denied by Policy Module: 0x80094801, The request does not contain a certificate template extension or the CertificateTemplate request attribute."
    I get this same issue if I try to submit a request manually from an IIS server.  It only works if I send a domain cert request through the IIS wizard.
    Can someone help me fix this?  I've been having this issue for years now, and I need to figure out how to make this work before I can properly troubleshoot my Exchange 2013 CAS setup.  The Certificate Authority is installed on Windows Server 2012
    Standard, but I've been having this issue before we upgraded the OS to this.
    ----------- Ron E Biggs Network Administrator Entertainment Studios

    Hi Ron
    This issue may be caused by incorrect Certificate Template permission settings. Let’s
    give Authenticated user Enroll permission:
    1.    Open MMC, click File menu, choose Add/Remove Snap-in, choose Certificate
    Templates, click OK. 
    2.    Double-click Web Server template, switch to Security tab, selected Authenticated
    users, click Enroll option. Click OK.
    3.    Open CA console, stop CA service and restart it. 
    4.    Try to open MMC->Certificates of Local Computer, try to request Web
    Server certificates.
    At the same time, we can disable IE SEC and change IE security settings to bypass HTTPS requirement.
    To do so:
    1.    Open  Server Manager, click Server Manger in the left panel, click
    Configure IE SEC in the right panel.
    2.    Click Off at least for administrator.  Click OK. 
    3.    Open Internet Options, switch to Security tab, click Trusted sites,
    move the slide bar to bottom. Click Local intranet, move the slide bar to bottom, click OK. 
    4.    Restart IE and try to visit http://localhost/certsrv, you should be
    able submit request. 
    If there is any error, please let us know the detailed error message
    Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts on http://exchangequery.com

  • Create a Domain Controller and a Child Domain using Powershell

    Is it possible to create a Domain Controller and a Child Domain using Powershell?

    Yes, you can do that:
    WS2008R2 -
    http://technet.microsoft.com/en-us/library/cc731394%28v=ws.10%29.aspx
    http://technet.microsoft.com/en-us/library/cc731873%28v=ws.10%29.aspx - This isn't technically PowerShell.
    WS2012 -
    http://technet.microsoft.com/en-us/library/jj574105.aspx
    EDIT: You've asked this same question a few times now, is there something specific that's giving you trouble?
    Don't retire TechNet! -
    (Don't give up yet - 12,830+ strong and growing)

  • Windows Server 2012 Foundation, in a Workgroup - "The server did not finish checking the license compliance. If the server is joined to a domain, make sure that the server can connect to a domain controller"...

    Every few days we see two dialogs with the following messages:
    Dialog 1, title: Check for Licensing Compliance is Incomplete
    The server did not finish checking the license compliance. If the server is joined to a domain, make sure that the server can connect to a domain controller.
    Dialog 2, title: Check for Licensing Compliance is Incomplete
    The server did not finish checking the license compliance. If the server is joined to a domain, make sure that the server can connect to a domain controller. If the license compliance check cannot be completed, the server will automatically shut
    down in 8 day(s) 23 hour(s) 0 minute(s).
    The server is not (and never has been) joined to a domain or had any DC roles installed. In fact its still connected to the default Workgroup.
    The server was configured in our office and never showed this message until it was installed on site. The main difference from what I can see is that when installed on site it was given a static IP address and does not have any DNS settings in the network
    adapter properties. 
    I have scoured a number of forums on this error but in almost every other instance of this error message the servers are connected to a Domain Controller and the solutions generally are linked to dis-joining and rejoining the domain. Unfortunately this is
    not an option for this scenario.
    I initially thought that adding some relevant DNS server IP address may resolve the issue, however, we have the exact same model server configured exactly the same running at a different site that does not experience this problem. This server also has no
    DNS server configured.
    I have seen a post that suggests turning off the servers "Foundation Checking", but I'm unsure how to do this.

    Thanks for your response Vivian.
    I can confirm that this server is not (and never has been) a member of any active directory, it is configured as a Workgroup server. It was initially configured on a network that does have an active directory, but was never joined to it. During that time it
    never displayed these messages.
    The server was moved into production on a different site and network and setup with a static IP address.The site network does have its own active directory but the server was not joined to it. It is whilst on this new network that these messages began.
    Since my original post DNS servers have been added and the Microsoft activation has been verified, however, the messages are still appearing.
    There are only 2 user accounts configured on this server. The local admin account and another local admin user.
    The remote desktop services roles have been installed but not yet configured. I don't think that has any bearing on this scenario though.
    The description of this error in the above "Introduction to Windows Server 2012 Foundation" link states:
    This error occurs when the server cannot finish checking the requirements for the root domain, forest trust configuration, or both. It usually happens when the server cannot connect to a domain controller. If the situation persists, the server will
    shut down 10 days after the first time the compliance check failed. Each time this error message occurs, it will state the actual time remaining before the server will shut down. If you restart the server after it has shut down because of non-compliance, the
    server will shut itself down again in 3 days.
    The above description leads me to the following question - In a Workgroup environment, does the server still try to contact a domain controller to establish a level of trust? If this is the case could it be that the server can no longer see the initial DC
    on its new network and this is what is triggering the messages?
    Am I clutching at straws here?

  • Process MAD.EXE (PID=1932). All Domain Controller Servers in use are not responding:

    Process MAD.EXE (PID=1932). Topology discovery failed, error 0x80040a02 (DSC_E_NO_SUITABLE_CDC).
    Look up the Lightweight Directory Access Protocol (LDAP) error code specified in the event description. To do this, use Microsoft Knowledge Base article 218185, "Microsoft LDAP Error Codes." Use the information in that article to learn more about
    the cause and resolution to this error. Use the Ping or PathPing command-line tools to test network connectivity to local domain controllers.
    Process MAD.EXE (PID=1932). All Domain Controller Servers in use are not responding: 
    DC02.targetiletisim.local 
    DC01.targetiletisim.local 
    Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=1148). Topology discovery failed, error 0x80040a02 (DSC_E_NO_SUITABLE_CDC). Look up the Lightweight Directory Access Protocol (LDAP) error code specified in the event description. To do this, use Microsoft Knowledge
    Base article 218185, "Microsoft LDAP Error Codes." Use the information in that article to learn more about the cause and resolution to this error. Use the Ping or PathPing command-line tools to test network connectivity to local domain controllers.
    pls help me :(

    Hi,
    Please use dcdiag and nltest to test the connectivity.
    BTW, have you disabled ipv6 on Exchange Server.
    Thanks,
    Simon Wu
    TechNet Community Support

  • Can you creat an apple id through the computer?

    Can you create an apple id through the computer?

    Yes.
    https://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa/

  • Can you creat an Apple ID using the iTunes gift cards?

    Can you creat an Apple ID using the iTunes gift cards?

    Jack, are you trying to make a new account on a computer or and iOS device, you need to click the links and follow the instruction to make the account without a credit card.  After you make your account then redeem your iTunes card. http://support.apple.com/kb/ht2534

  • Can you create apps after 1st May 2015 using Adobe DPS single edition?

    Can you create apps after 1st May 2015 using Adobe DPS single edition?
    I currently have SE via creatieve cloud - one of the only reasons we switched to CC was for the DPS SE.
    Does anyone know if this capability will just be 'switched off' at midnight 1st May 2015?? There are huge costs for going the enterprise route but with no date in sight for Publish to be launched I am not sure I can wait for this, or should I???

    Adobe states: Please note that the Digital Publishing Suite, Single Edition, service will be available for use until May 1, 2015, but beyond that date the service will no longer be available.
    So essentially my licence will expire on 1st May - Adobe's note just mentions 'service' -  even though part of CC and I will not be able to maintain my app or create any more IPA's after 1st May. I can't beleive there is nothing to switch over to other than paying thousands of pounds for enterprise??
    Just all so vauge, feels like a plug is going to be pulled and thats it??? Maybe I am missing something?

  • Can you create a file without presenter's notes?

    Can you create/export a file that won't be able see presenter's notes, either in Keynote or PPT format?

    Yes, I can export to pdf without the notes. I was wondering if it was possible to send someone the slides in PPT format without including my presenters' notes.
    They are lecture slides for a class, so I am giving my students copies in pdf, but I might want to give them to someone else in a format they can edit and use as slides, but without having my notes to myself in there. I suppose it's not designed for such an option, as far as I can tell, hiding the notes doesn't make a difference if exporting to PPT.

  • How can you create a spry menu bar with no background colour?

    How can you create the first level of a spry menu bar to have no colour? I have a coloured background right now and the colour matches when you load the site in Internet explorer but does not match in Firefox. Any suggestions are welcomed on how to fix this.
    Thanks!
    HK

    Here is the site:
    http://partnersnaturally.ca/
    I am learning with code, (obviously) so any feedback would be nice. I use dreamweaver CS4, but when I originally designed the site it was in a much older version of dreamweaver. I wonder if that could also be a cause. (besides human error)
    Thanks again,
    HK

  • How can you create a writable PDF document from a PPT presentation ?

    How can you create a writable PDF document from a PPT presentation ? Upper part with the image , lower part with a free space in order to take notes for students during presentation or course.
    Thanks.
    B

    You can make a PDF file out of you notes and handouts but using the Adobe PDF printer.
    Open your PowerPoint Document then go to “File” “Print”
    Select ‘Adobe PDF” Printer
    Under slides, select which way you want to print. Note it will not print to a printer but to a PDF file.
    After then go into printer Properties and Setup PDF properties, do the following: (see second image below)
    Default: PDF/A 1-b
    Adobe Security: none (change as needed)
    Adobe Output folder: Prompt for Adobe file name
    Adobe Page size: Letter (change as needed)
    Check the following check boxes
    View Adobe PDf Results,
    Add Document Information,
    Rely on system fonts only,
    Delete Log files for successful jobs.
    Select OK
    A pop will ask you where you want to save the document. The file extension should be PDF. After giving the file name select okay and the file should popup as a PDF. Down side is if you want to speaker notes included then you will have to do another file, like wise with just screen shots then combine into one PDF document.
    I used Acrobat IX Pro. So to do this you need Acrobat IX or X Pro.
    Hope this will help.
    Tiger26

  • How can you create a playlist with music and music video and play those from same playlist through Apple TV?

    How can you create a playlist on Ipod touch with music and music video,  and play those from same playlist through Apple TV?  I can download, create a playlist with both music and music video, stream that through the Apple TV with no problem.  The sound and the information show up on the TV, but when it gets to a music video, it only shows the information and "artwork".
    I also have a video playlist - videos play fine through the Apple TV, but will not shuffle through all videos - continues to repeat the same one.  I have most definitely selected shuffle in both locations - from the playlist and on the ipod video screen while video is playing.

    I finally got it... had to sync the photos with the music in iMovie, arrange the voiceover in GarageBand then export to iTunes, and then I was able to put it all together in iMovie and burn in iDVD... had a few glitches along the way but finally finished : )
    Message was edited by: jpewald

  • Can you create an image field in the form so a respondent can upload a photo to it?

    Can you create an image field in the form so a respondent can upload a photo to it?

    Use the File Attachment field to allow respondents to include a photo with their submission.
    Regards,
    Brian

  • Can you create a template that has a header and footer to forms?

    Can you create a template that has a header and footer to forms?

    Yes but how are they going to create the Landscape versions?
    The problem with doing it in Pages '09 as rotated content is that the Headers and Footers are not rotated and there is inherent clumsiness in the rotated content usually being too large for the page when viewed at 90°.
    Best to make it in two or more separate documents.
    Peter

  • Can you create a new folder and put several documents in it in Adobe?

    Can you create a new folder and put several documents in it in Adobe?

    Thank you for your help. Now I just want to expand on this a bit. To use the Applescript you have supplied me, how do I tell it to name the folder other than by date, and where to put it?
    Let me say, preferably, is it possible to make an action like this right-clickable? Instead of having to pick a script. Anything that slows this process down means I might as well do it all by hand. What I'd really love to do is this:
    Select a number of items. Right click to an action saying "create a new folder and put this items in it. Name the folder with the first item's name". Very simple and quick.
    Could this be accomplished? Through Automator? or something that can appear in the contextual menu? Folder actions?
    I'm just getting started with using these tools.

Maybe you are looking for