Re: User notification before certificate expires

thanks, martin
I think this will help.

//MC


"Martin Rublik" <martin.rublik@xxxxxxxxx> wrote in message
news:uBoF1XIhGHA.4708@xxxxxxxxxxxxxxxxxxxxxxx
Don't know if this is the best possible solution but you might want to
take a closer look on certutil utility
(http://technet2.microsoft.com/WindowsServer/en/Library/165ee684-1c3a-4cc1-9c5b-0bc1ec1e710a1033.mspx?mfr=true).

Here's a little sample

certutil -view -restrict "Certificate Expiration Date < 12. 6. 2006
13:44" -out "Issued Common Name, Issued Email Address"

Then you can parse the output with some script and send mail to that
address.

Restriction list is similar to the Filter fields in MMC Certification
Authority console (You can find them in View | Filter | Add ...).

Regards

Martin

MC wrote:
Does someone know a solution to monitor user certificates (windows ca) ?
The system should send a notification to a user (e.g. via mail) that
his/her certificate will expire in x days.

any other idea how to handle expiring smart card logon certificates when
it's not possible to implement automatic certificate renewals ?

thanks
MC


.

Relevant Pages

  • Re: how to bypass a known-bad SSL certificate
    ... Is this script just for running on one machine that you control? ... might be able to just disable certificate checking in IE Advanced Options. ... > this warning for a specific certificate and/or webserver? ... Set objHTTP = WScript.CreateObject ...
    (microsoft.public.scripting.vbscript)
  • Re: how to bypass a known-bad SSL certificate
    ... Is this script just for running on one machine that you control? ... might be able to just disable certificate checking in IE Advanced Options. ... > this warning for a specific certificate and/or webserver? ... Set objHTTP = WScript.CreateObject ...
    (microsoft.public.scripting.wsh)
  • RE: How to enable certificate purpose programmatically?
    ... ' This script removes sets the "meta eku" on a particular certificate. ... Set Store = CreateObject ... Set ExtendedProperty = CreateObject ...
    (microsoft.public.platformsdk.security)
  • Re: SSL/TLS - am I doing it right?
    ... Signing a certificate request is easier: ... Why do people feel the need to wrap that up in some Perl script? ... you were using OpenSSL or M2Crypto in a way that takes care of that. ... The problem with the world is stupidity. ...
    (comp.lang.python)
  • Re: Re-enrollment of Certificate on Win 2000
    ... require certificate manager approval. ... In fact, autoenrollment in Windows ... If you are requiring CA certficate manager approval with the Windows ... > Use of included script samples are subject to the terms specified at ...
    (microsoft.public.windows.server.security)