Locksmith
Locksmith copied to clipboard
If CA is unavailable, Auditing/ESC6/ESC11 Reporting is Unclear
Describe the Bug
If Locksmith cannot get data from certutil.exe (either from network issues or limited privileges), Locksmith reports Auditing/ESC6/ESC11 Issue as "CA Unavailable" and Fix as "N/A". This is not helpful.
Steps To Reproduce
- Lock down the use of
certutilby low-privileged users. - run Locksmith.
Expected Behavior If CA is unavailable, Locksmith should return the reason why it's unavailable.
Environment
- Locksmith Version: 2025.1.14 (unreleased)
- OS: Windows Server 2019
- PowerShell Version: Windows PowerShell 5.1
- PowerShell Host: VS Code Terminal
Additional Context Submitted on behalf of @PSmithing