Tag: Windows
All the articles with the tag "Windows".
IIS HTTP to HTTPS
Updated:In the process of deploying an IIS web server we'd like to ensure that browsers that visit the http unencrypted page, get redirected to the https encrypted
SSL/TLS as a Server Admin
Updated:I don't trust you just because we can encrypt data together. I need to trust you based on a 3rd party we both trust telling me that you are who you say you are.
Diving Deeper into Windows SSL
This response to a question raised some interest and I found it very interesting. I then went to investigate the keys and values on my own machine. This ca
MySQL Enterprise
Updated:Today’s a MySQL day. After the shocker that is Microsoft Licensing I decided to seriously look at what MySQL has to offer the enterprise. I read their white paper and thought somethings sounds too good to be true. So I spent half an hour on the phone with someone in their enterprise team.
Updating ADFS Certificates
This wasn't as easy as I thought it was going to be. I expected just to import the new certificate into the mmc certificate snap in and then set ADFS to use it in the ADFS Management console by choosing "Set Service Communication Certificate...". Why would it need to be more difficult than that?
Horizon SSL/TLS Ciphers
Updated:After running an SSL scan on our external facing Horizon Security Server, using Qualys' SSLTest and receiving an A- rating, I wanted to fix that by getting
Horizon Updating Certificates
Updated:Updating certificates on the Windows hosts for Connection and Security Servers. Import the signed SSL server certificate into the Windows local computer ce
TLS and NPS
Updated:Looks like NPS only supports TLS1.0 by default. So if you go restricting your ciphers too much you'll find none of your NPS clients able to connect using E
Strong Ciphers
Updated:Strong Ciphers for Apache, nginx and Lighttpd https://cipherli.st/ Mozilla SSL Configuration Generator https://mozilla.github.io/server-side-tls/ssl-config
Server Message Block (SMB) Protocol Version 1 Unspecified RCE (uncredentialed check)
Updated:Start Powershell as an administrator and run the following to disable SMB Version 1. PS C:\> Get-SmbServerConfiguration | select enablesmb1protocol enables