Windows 10: Strong Certificate Matching

Hello,I've been tasked with implementing Strong Certificate Matching on Enterprise servers. After doing some research I saw that this could cause major authentication issues on Domain Controllers. Does anyone know how this is safely rolled out or has anyone does this in their environment yet? What systems does it affect?Thanks

:)

 

N8 certificates not trusted/don't match the name

Well I worked out for myself how to verify the certificates are genuine:

• Using a desktop computer
• Go to the page with the certificates
• Select a certificate
• It will say either:
  • Certificate already exists - this confirms that the certificate on the website matches one already in your browser, which we already trust, therefore the certificate on the website is trustworthy
  • Asks if you want to install the certificate, DON'T.
    • First view the certificate details.
    • Copy the certificate serial number or SHA1/SHA256/MD5/etc hash
    • Paste this into a search engine
    • If another website that you trust lists the certificate, e.g. your phone manufacturer or another trusted website (preferably a secure website, therefore you have confidence the website is genuine), then you can trust the certificate
    • If no trustworthy sites are returned in the search then try another hash or serial number
    • If you can't find any trustworthy sites listing the certificate then I suggest you don't trust it.
• Finally, if you decide you trust a certificate then you can download and install on your phone.

 

Unable to view Certification portal

Hi SantosiniChoudhury



Thanks for posting the thread on our forum.



According to your description, it seems that you get the error message and can’t view Certification portal.

About how to download the certificate, you can do the following steps:

1. On the “Your dashboard” page, please click on 'Download or purchase' under “Certificates”.
   
2. On the “Certificate” page, select the certificate(s) that you would like to download or purchase.
   
3. Please click on the “PDF” button. An "OPEN, SAVE, SAVE AS" bar will pop-up at the bottom of the page.
   

Besides, we kindly advise you to follow the steps listed below and attempt to try the following troubleshooting over the day:

1. Make sure to use an up-to-date browser. (e.g. Edge)
   
2. Clear cache and cookies. Make sure you check Preserve Favorites, website data and check both Temporary Internet Files and Cookies; then click Delete.
   
3. On the Delete Browsing History window, make sure to uncheck Preserve Favorites, website data and check both Temporary Internet Files and Cookies; then click Delete.
   
4. Allow all third-party cookies through the browser settings.
   

Hope the suggestions can help you.



Regards,

Stacey

 

N8 certificates not trusted/don't match the name

Hello,

Thanks for the suggestion. How do you know that the certificates from this person are trustworthy? The web domain is just personal one, not from any trusted certificate authority.

Thanks.