Windows 10: Does Kerberos S4U with a certificate verify the certificate

We are attempting verify an Active Directory machine account, using Kerberos S4U with a Certificate.The client sends the public part of a provisioned certificate to a remote server. The server then attempts to locate the machine account using Kerberos S4U with the public certificate.All this works as expected.However, in addition to performing the MS-RCMP to get the account, it was expected that the domain controller would also verify the basic certificate properties, such as expiration, and revocation. However, this seems not to be the case.Can you confirm if this is the case, and if not, is

:)

 

N8 certificates not trusted/don't match the name

Well I worked out for myself how to verify the certificates are genuine:

• Using a desktop computer
• Go to the page with the certificates
• Select a certificate
• It will say either:
  • Certificate already exists - this confirms that the certificate on the website matches one already in your browser, which we already trust, therefore the certificate on the website is trustworthy
  • Asks if you want to install the certificate, DON'T.
    • First view the certificate details.
    • Copy the certificate serial number or SHA1/SHA256/MD5/etc hash
    • Paste this into a search engine
    • If another website that you trust lists the certificate, e.g. your phone manufacturer or another trusted website (preferably a secure website, therefore you have confidence the website is genuine), then you can trust the certificate
    • If no trustworthy sites are returned in the search then try another hash or serial number
    • If you can't find any trustworthy sites listing the certificate then I suggest you don't trust it.
• Finally, if you decide you trust a certificate then you can download and install on your phone.

 

security certificate

Hi,

Thank you for posting your query on Microsoft Community.

I would like to know if this issue occur on Different Web browsers too?

I would suggest you to try the following steps, when you access secured website you may get this error message.

1. Open Internet Explorer and verify that the page you are trying to view is listing a certificate error.

2. To clear the certificate error goes to Tools --> Internet Options from the menu of IE 11.

3. Click on the advanced tab and scroll down to the security section. Clear the boxes for: "Check for publisher's certificate revocation" and "Check for server certificate revocation".

4. Click Apply and Ok.

5. Attempt to reload the page by clicking the Refresh button at the end of the address bar or by pressing the F5 key. Your page should now load as expected.

This error can be cause by the SSL certificate of the website – maybe it was not issued by a trusted Certification Authority on the client side. It could even be an attempt to fool you or intercept data you send to the server. Or maybe the certificate has
expired.

I suggest you to refer to the Microsoft help article and check if it helps.

"There is a problem with this website's security certificate" when you try to visit a secured website in Internet Explorer - Microsoft Support

I would suggest you to refer the link below and check if it helps:

Certificate errors: FAQ

Certificate errors: FAQ - Microsoft Support

Hope this information was helpful and do let us know if you need further assistance. We will be glad to assist.

 

Unable to view Certification portal

Hi SantosiniChoudhury



Thanks for posting the thread on our forum.



According to your description, it seems that you get the error message and can’t view Certification portal.

About how to download the certificate, you can do the following steps:

1. On the “Your dashboard” page, please click on 'Download or purchase' under “Certificates”.
   
2. On the “Certificate” page, select the certificate(s) that you would like to download or purchase.
   
3. Please click on the “PDF” button. An "OPEN, SAVE, SAVE AS" bar will pop-up at the bottom of the page.
   

Besides, we kindly advise you to follow the steps listed below and attempt to try the following troubleshooting over the day:

1. Make sure to use an up-to-date browser. (e.g. Edge)
   
2. Clear cache and cookies. Make sure you check Preserve Favorites, website data and check both Temporary Internet Files and Cookies; then click Delete.
   
3. On the Delete Browsing History window, make sure to uncheck Preserve Favorites, website data and check both Temporary Internet Files and Cookies; then click Delete.
   
4. Allow all third-party cookies through the browser settings.
   

Hope the suggestions can help you.



Regards,

Stacey