Windows 10: Cant get Enterprise Certificate pinning to work?

I've tried to get certificate pinning to work - but nothing happens. - Nothing in the eventlog either.This is more or less the only information I found about it: https://learn.microsoft.com/en-us/windows/security/identity-protection/enterprise-certificate-pinningI extracted the intermediate cert from the chain from the sunet.se site to R3.crt and made this XML-file:<PinRules ListIdentifier="PinRules" Duration="P10D"> <PinRule Name="MultipleSites" Log="true" Error="Revoked"> <Certificate File="R3.crt"/> <Site Domain="sunet.se"/>&nb

:)

 

Can't create pin for login. Pin stopped working

Hi Kevin,

To resolve your concern about creating pin to your computer, we suggest that you follow these steps:

• Navigate to C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC (click to get permission when prompted).
• Delete the contents of that folder (delete everything in that folder, but leave that folder and everything above it).
• Go back to settings, accounts, sign in options.
• Your non-working pin will now be gone, and you can just click 'add a pin' and set it again.

Let us know how it goes.

 

Nokia N8 wifi WPA2 Enterprise with no authentication certificate cannot connect

Could you be more specific, in step 1 how do you get to the certifiicate?

 

Nokia N8 wifi WPA2 Enterprise with no authentication certificate cannot connect

Buddies, i got a good news to share. The basic thing you need for WPA/WPA2 is a certificate. So here is what i did to connect to my enterprise WPA wifi.

1. Get your certificate. Find for the certificate from your laptop's wifi. Goto wifi properties, under validate server certificate find any certificate related to your enterprise (probably with your enterprise or universitiy name). Select the file, under detail
tab, choose copy to file. Save the file under DER format (.cer). In my case i had 4, so i copied all 4 to try out which one works for me.

2. Now copy the certificates to your phone. Goto the certificate and execute it to intall the certificate to your phone automatically. Now your certificates are ready.

3. Goto settings -> network destinations -> "your network" -> wifi security settings -> EAP plug in setting (make sure your WPA/WPA2 = WPA) -> EAP-PEAP -> Select authority certificate you have executed earlier (step 2) -> username in use = user define -> username
= domain\username -> realm in use = user defined -> realm = "empty". Now goto EAPs tab and under EAP-MSCHAPv2 key in your username without domain -> set your password.

This method worked for me. Others try and let share your steps.