Blog Post

Core Infrastructure and Security Blog
4 MIN READ

The Nightmare of Validating Certificate Requests

DagmarHeidecker's avatar
DagmarHeidecker
Icon for Microsoft rankMicrosoft
Feb 26, 2023
At CRSP we help customers to recover from different types of cyber security incidents. This means that we help more or less with wherever help is needed (from hardening AD and AAD, to restoring Excha...
Updated Nov 09, 2023
Version 4.0
DagmarHeidecker
LegoVader's avatar
LegoVader
Icon for Microsoft rankMicrosoft
Mar 02, 2023

UweGradenegger sure we know your policy module. However I disagree with your statement about 100% automation. Certificate request validation should NEVER be a full automated task. There MUST be human responsibility for validating the compliance of a request and the final issued certificate. So, a human control function is required in any case. Being lazy on this means getting compromised sooner or later.