Inspecting TLS/SSL traffic on corporate networks is very common, as over 80% of all web traffic is encrypted. If you aren’t performing TLS/SSL traffic inspection, you are potentially leaving your network exposed. The simple act of inspecting SSL connections helps reduce your attack surface. SSL inspection can make it harder to establish malicious outbound connections,…
Certificate chain issues are extremely widespread and more common than you think. You start to see how many websites have broken certificate chains when you start performing SSL inspection on a network. If you want to read more about certificate chains, my post Certificate Chain goes into more detail. My website, thedxt.ca, has a server…
This post will explain the main components of a certificate and how they contribute to a certificate chain. A certificate chain consists of three main components: Root CA A root CA is the most trusted source of authority for certificates. It is the first link in a certificate chain, and all certificates are issued by…
While having your SSL/TLS certificate in a PFX file is great, as most applications support the PFX file, there are still some cases where a PFX file is not supported, and you need the certificate in the PEM format as a CRT file (also called a CER file) with a key file (also called a…
Installing an SSL/TLS certificate on the Omnissa Horizon Connection Server (formerly the VMware Horizon Connection Server) is a common task. The whole process may feel daunting if you’ve never installed a certificate on the Horizon Connection Server. Omnissa Horizon has had a few names, and some of those old names are still present at its…
The VMware vCenter root certificate is an essential part of vCenter. When you install vCenter, it also installs the VMCA (VMware Certificate Authority) in your vCenter. The VMCA is a barebones CA for vCenter that issues certificates to the various elements of vCenter as needed. You should install the VMCA root certificate on your system…
Once you have exported your certificate, the next step is installing the certificate PFX on other servers as needed. In this post, I will show you step-by-step how to install an exported PFX certificate file on a Microsoft Windows system. Prerequisites The Process
Installing your own certificate is one of the first things you’ll need to do when setting up the Omnissa Unified Access Gateway appliance (formerly the VMware Unified Access Gateway appliance). In this post, I will detail step-by-step how to install a certificate on the VMware UAG. Prerequisites The Process
If you work with wild card certificates, it’s common to need to deploy them to more than one server. You will need to export the certificate to install it on other systems. In this post, I will show you step-by-step how to export a certificate using MMC (Microsoft Management Console). The Process
When you create a CSR and provide it to your certificate vendor or CA (Certificate Authority), you must complete the CSR (Certificate Signing Request). In this post, I will show you step-by-step how to complete a CSR. Prerequisites You can check which system has the pending certificate by checking the Certificate Enrollment Requests in MMC…
