Strong Certificate Mapping in Active Directory with Richard Hicks
About this episode
Are you using strong certificate mapping in Active Directory? Richard Hicks returns to the show to talk about the impacts of KB5015754, issued way back in 2022, and how it turned into an enforcement event on February 11, 2025 that might have caused some serious problems for folks trying to authenticate to Active Directory. For most sites, the upgrade to strong certificates was pretty much automatic. But if you're using Intune SCEP, you needed to do some configuration - and if that was missed, there is trouble. There are workarounds for now, but come September 2025, enforcement will be mandatory and everything gets harder, so it's worth looking into it now!
Links
- KB5015754: Certificate-based Authentication Changes on Windows Domain Controllers
- Richard's Blog Post on Strong Certificate Mapping Enforcement
- Active Directory Certificate Services
- Create and Assign SCEP Certificate Profiles in Intune
- Heartbleed
Recorded February 17, 2025
Get every episode summarized
Each time RunAs Radio publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
Hosts & guests
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from RunAs Radio
State of WSUS with Adam Marshall
RunAs Radio
Reimagining Intranets with Susan Hanley
RunAs Radio
Security Features of PowerShell 7 with Mike O'Neill
RunAs Radio
Automatic Attack Disruption with Liz Tesch
RunAs Radio