Request Add Uwe Gradenegger's ADCS Blog and TameMyCerts to the AD Resource Wiki #16
Description
Description
Uwe Gradenegger's Blog - as the best resource for Active Directory Certificate Services.
His blog contains authoritative and security-minded information from the basics:
https://www.gradenegger.eu/en/basics-cryptographic-service-provider-csp-and-key-storage-provider-ksp/
https://www.gradenegger.eu/en/basic-configuration-file-for-the-certification-authority-capolicy-inf/
https://www.gradenegger.eu/en/basics-delta-blacklists/
To troubleshooting via event logs:
https://www.gradenegger.eu/en/day/event-log/
Also, his TameMyCerts tool is a free, open source, excellent policy module for Active Directory Certificate Services which can be used to singificantly improve ADCS over the in-box provided
I haven't found a more authoritative source on ADCS.
Link
Blog: https://www.gradenegger.eu/en/
TameMyCerts: https://github.com/Sleepw4lker/TameMyCerts
Other
From 2015 to 2020, he was with the Microsoft Germany GmbH in Munich as a Senior Premier Field Engineer Security with a focus on public key infrastructures, where he was able to work with the most high-profile representatives of their profession