Quick inventory of all certificates expiring in the next XX days

A simple command line using Certutil to dump out all issued certificates on the server about to expire in the next 60 days: certutil -view -restrict “NotAfter>now,NotAfter<=now+60,Disposition=20” -out RequestID,RequesterName,Request.CommonName,CommonName,UPN,NotBefore,NotAfter,SerialNumber,CertificateTemplate,CertificateHash   …creative uses: Schedule a monthly task in the Windows Task Scheduler with two Components; the first to generate the list and pipe it to a…

1

Setting up your first ADFS POC

Here are the steps for setting up a POC for ADFS: First of all, you need to decide on what your federation server farm will be called on the Internet. In the drawing below I’ve chosen the name fs.contoso.com – this will be registered in DNS as follows: in external DNS to point to the…

1