April 2026

ESC1 in Active Directory Certificate Services

ESC1 is an Active Directory Certificate Services misconfiguration involving certificate templates. ESC1 exists when a user or computer can request an authentication-capable certificate while supplying identity information that should not be under their control. This matters because certificates can act like credentials. If a certificate can be used for authentication, and a requester can influence […]

ESC1 in Active Directory Certificate Services Read Post »

Certificate Templates in Active Directory Certificate Services

Certificate templates are one of the most important security components in Active Directory Certificate Services. The simplest way to think about a certificate template is: A certificate template defines what kind of certificate can be issued, who can request it, and what the certificate can be used for. Templates are useful because they make certificate

Certificate Templates in Active Directory Certificate Services Read Post »

What is Active Directory Certificate Services

Active Directory Certificate Services, often shortened to AD CS or ADCS, is Microsoft’s public key infrastructure platform for issuing and managing certificates in Windows environments. The simplest way to think about AD CS is that AD CS allows an organization to issue trusted internal certificates for users, computers, services, devices, and applications. Those certificates may

What is Active Directory Certificate Services Read Post »

Scroll to Top