Log in
|
Popular shared stories on NewsBlur.
|
This post describes how to install Active Directory Certificate Services (ADCS) onto a domain controller. It’s for labbing purposes which means I’m going to run this all on a single server instead of a more realistic setup with offline root, issuing CA, and possibly intermediate CA. Don’t use this post for anything designed to go into production!
To add the ADCS role. Go to Server Manager, click Add roles and features. Click Next until you get to Server Roles. Select Active Directory Certificate Series:
Click Add Features. Click Next. Click Next. Then a warning is displayed that it’s not possible to change the computer name or domain settings:
Click Next. Select Certification Authority and Certification Authority Web Enrollment:
Selecting Certification Authority Web Enrollment will install IIS and a small web site will be built to provide certificate services.
Click Add Features. Click Next. Click Next. Select Restart the destination server automatically if required:
Click Install. The installation starts:
When the installation has finished, click Close. Click AD CS in Server Manager. Click More… where it says Configuration required for Active Directory Certificate Services:
Click Configure Active Directory Certificate Services on the destination server:
Select an account with permissions to configure the role services:
Click Next. Select Certification Authority and Certification Authority Web Enrollment:
Click Next. Select Enterprise CA:
Select Root CA:
Click Next and then Select Create a new private key:
Click Next. This is a lab so we’ll use the default cryptographic provider (RSA) with a 2048-bit key length and SHA256:
Click Next. Then it’s time to name the CA. Note that the server name can be different from the common name used for the CA. The name used here is what you will see in the certificates issued by the CA:
Click Next. I’ll go with the default validity period of five years:
Click Next. I’m using the default location to store certs and cert logs:
Click Next. A summary is shown on the Confirmation page:
Click Configure. The services are configured:
Click Close. Now open the CA app:
It should look similar to the one below:
Look for the green check mark symbol.
That’s all that’s needed to setup a basic CA! In another post we’ll look at setting up certification templates. Once again, this setup is for labbing only. Don’t use it for production! You shouldn’t run a CA on your domain controller. See you in the next one!
Maureen Farrell, writing for The New York Times:
In May 2022, the chief financial officer of Boar’s Head, the processed meat company, was asked a simple question under oath.
“Who is the C.E.O. of Boar’s Head?”
“I’m not sure,” he replied.
“Who do you believe to be the C.E.O. of Boar’s Head?” the lawyer persisted.
The executive, Steve Kourelakos, who had worked at the company for more than two decades and was being deposed in a lawsuit between owners, repeated his answer: “I’m not sure.”
It is odd, to say the least, when a top executive of a company claims not to know who his boss is. And Boar’s Head is no fly-by-night enterprise. The company is one of the country’s most recognizable deli-meat brands; it generates what employees and others estimate as roughly $3 billion in annual revenue and employs thousands of people.
There’s secretive, and then there’s secretive.
A CNN investigation into “Swiss-made” watches being sold by former President Donald Trump led to an unexpectedly stimulating discovery.
Being the Republican presidential nominee hasn’t stopped Trump from hawking all kinds of products, including sneakers, Bibles, cryptocurrency, silver coins, and other items. Of particular interest to CNN reporters Steve Contorno and Scott Glover were the watches Trump sells. As it turns out, the watches were not actually made in Switzerland, which has strict rules on what products can be deemed Swiss-made.
Trump’s timepieces sell for hundreds of dollars, but one sells for $100,000. The website where they can be purchased describes them as “Swiss-made.”
However, CNN’s probe of the origin of Trump’s watches led them to a company called BestWachesOnEarth LLC, which has an address in a small town in Wyoming called Sheridan.
“[A] CNN investigation into the manufacturing and distribution of the Trump-branded timepieces dead-ended at an innocuous-looking shopping center in a small city in remote northern Wyoming, not far from the border of Montana,” the report stated, adding:
There, sharing a parking lot with a hodgepodge of businesses including an H&R Block, a Wendy’s fast-food restaurant and a “vape and hemp smoke shop,” is a nondescript office space that serves as the mailing address for TheBestWatchesOnEarth LLC, the company behind the new line of Trump watches. The building houses a daycare, but there is no sign of the watches Trump says, “puts you in a very exclusive club.”
CNN said that dozens of other companies claim the address, including the aforementioned Trump sneakers. Another company linked to the address is BestHoneyOnEarth.
Contorno joined Thursday’s CNN News Central, where he shared these findings with Boris Sanchez and Brianna Keilar.
“And I should mention, Boris, about that honey company, which, I left out the best detail,” Contorno said. “They sell ‘male enhancement honey,’ which is exactly what it sounds like.”
Sanchez and Keilar burst out laughing.
“Stop it, Steve!” Keilar exclaimed.
“It is a product that helps men perform the bedroom,” Contorno continued. “And the FDA actually flagged several of the products that this company sells on its website because they were sneaking Viagra or the drug behind Viagra into the ingredients.”
“I was not prepared for that!” Keilar said, nearly crying from laughing.
“That’s a curveball,” Sanchez deadpanned.
Watch above via CNN.
Have a tip for us? tips@mediaite.com
Vice President Kamala Harris simultaneously roasted a heckler and former President Donald Trump’s campaign during a rally in Wisconsin on Thursday.
Speaking in La Crosse, slammed Trump’s appointment of three of the Supreme Court justices who would later vote to overturn Roe v. Wade and the constitutional right to abortion.
“And again, we’re not going to be gaslighted on this,” she told the crowd. “We remember Donald Trump hand-selected three members of the United States Supreme Court with the intention that they would undo the protections of Roe v. Wade, and they did as he intended.”
At that point, at least a couple of members of the audience heckled Harris, but the words were not intelligible. Others in the crowd could be heard booing the person. The vice president decided to inject some humor into the situation.
“Oh, you guys are at the wrong rally,” she said as the audience hollered in approval. “No, I think you meant to go to the smaller one down the street.”
Harris has repeatedly mocked Trump’s rallies and the size of the crowds that attend them. During their only debate, the vice president said people leave the former president’s events before they end.
“She said people start leaving,” Trump responded, taking the bait. “People don’t go to her rallies. There’s no reason to go.”
Former President Barack Obama famously made fun of Trump’s fixation on crowd sizes during his address at the Democratic National Convention.
“It has been a constant stream of gripes and grievances that’s actually been getting worse now that he’s afraid of losing to Kamala,” he said. “There’s the childish nicknames, the crazy conspiracy theories, this weird obsession with crowd sizes.”
As he spoke, the former president moved his hands a few inches from one another to suggest Trump is trying to compensate for something.
Watch above via MSNBC.
Have a tip for us? tips@mediaite.com