Tag: Windows
All the articles with the tag "Windows".
Updating ADFS Certificates
This wasn't as easy as I thought it was going to be. I expected just to import the new certificate into the mmc certificate snap in and then set ADFS to use it in the ADFS Management console by choosing "Set Service Communication Certificate...". Why would it need to be more difficult than that?
Horizon SSL/TLS Ciphers
Updated:After running an SSL scan on our external facing Horizon Security Server, using Qualys' SSLTest and receiving an A- rating, I wanted to fix that by getting
Horizon Updating Certificates
Updated:Updating certificates on the Windows hosts for Connection and Security Servers. Import the signed SSL server certificate into the Windows local computer ce
TLS and NPS
Updated:Looks like NPS only supports TLS1.0 by default. So if you go restricting your ciphers too much you'll find none of your NPS clients able to connect using E
Strong Ciphers
Updated:Strong Ciphers for Apache, nginx and Lighttpd https://cipherli.st/ Mozilla SSL Configuration Generator https://mozilla.github.io/server-side-tls/ssl-config
Server Message Block (SMB) Protocol Version 1 Unspecified RCE (uncredentialed check)
Updated:Start Powershell as an administrator and run the following to disable SMB Version 1. PS C:\> Get-SmbServerConfiguration | select enablesmb1protocol enables
SSL 64-bit Block Size Cipher Suites Supported (SWEET32)
Updated:Nessus reports a vulnerability because of 64-bit cipher suites and SSL Medium Strength Cipher Suites Supported (even though it shows up as strong ). Window
SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam)
Updated:Create and set the following registry key value: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffi
Renamed Machine & Wrong Certificate Name
Updated:When we setup some virtual machines from a template and used temporary names for them because we needed to replace existing machines that were currently ru
View Composer Certificate
Updated:c:\> cd "c:\Program Files\VMware\VMware View Composer" c:\> sviconfig.exe -operation=replacecertificate -delete=false Restart the View Composer service "VM