G Derber

- [x] create_subject_key_identifier - [ ] authority_cert_serial_number - [x] authority_key_identifier - [ ] state: present Refs: - https://docs.ansible.com/ansible/latest/collections/community/crypto/openssl_csr_module.html

Refs: - https://www.christiaanconover.com/blog/yubikeyconfig/

acmeca host certificates challenge completion fails if redirect http to https is enabled

2

If the site redirects http to https. The challenge completion fails with an error message about not being able to find the site. Something is weird about it though, because...

Need to be able to enable smartcard logon for windows. Refs: - https://docs.microsoft.com/en-us/troubleshoot/windows-server/windows-security/enabling-smart-card-logon-third-party-certification-authorities - https://docs.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-how-smart-card-sign-in-works-in-windows - https://superuser.com/questions/446969/how-to-logon-to-windows-with-a-smartcard/447002 - https://doc.primekey.com/ejbca/ejbca-integration/integrating-with-third-party-applications/microsoft-smart-card-logon - https://docs.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-how-smart-card-sign-in-works-in-windows - https://docs.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-windows-smart-card-technical-reference - https://www.serverbrain.org/active-directory-infrastructure-2003/setting-up-a-smart-card-for-user-logon.html - https://superuser.com/questions/1268620/samba-ad-windows-10-smart-card-login - https://www.youtube.com/watch?v=C7bqTKdM8w0 -...

Encrypt emails in storage on a per user basis

2

# Evaluating the options. ## [Dovecot: mail-crypt-plugin](https://doc.dovecot.org/configuration_manual/mail_crypt_plugin/) #### Advantages: 1. It's built into dovecot 2. Allows for spam training via . #### Disadvantages: 1. It stores user secret keys on...

Once it's confirmed that smart cards work without issues, switch the certificates to ECC. Block by: #112 #360

Requirements: - [ ] Backup files - [ ] Backup databases - [ ] Use Tower of Hanoi backup scheme - [ ] Allow arbitrary # of sets - [...

References: - https://ubuntu.com/server/docs/security-apparmor