If only certificates were all gift certificates! The ‘ADCS Addendum packs’ disables noisy rules, adds OCSP seed, OCSP responder and OCSP group (classes). Recovery and service monitoring and nCipher event are the main highlights reducing alerts for ADCS 2012,2012R2,2016+. My thanks to Bob Williams CSA, for the assist!
Quick Download(s)
2012 HTTPS://GITHUB.COM/THEKEVINJUSTIN/ADCS2012QAddendum
2012R2 HTTPS://GITHUB.COM/THEKEVINJUSTIN/ADCS2012R2ADDENDUM/
2016+ https://github.com/theKevinJustin/ADCS2016-Addendum
Overview of addendum capabilities
Remember the why addendum packs for guiding purpose, transform!
The ADCS Addendum packs discover OCSP (seed class), and OCSP responder registry keys installed on monitored servers.
Group discovery tailors OCSP classes, for subscription or alert tuning.
Monitors and service recoveries keep OCSP services monitored, and only alert when manual intervention is required.
Tailoring the pack(s) to your environment
First, you must have at least ONE (1) set of ADCS Active Directory Certificate Services management packs so the ‘ADCS Addendum pack’ will load. The three versions currently supported have addendums, hopefully 2012,2012R2 are planned to be decommissioned in the short term.
Second, if you don’t have OCSP in your environment, download, and then import into your environment –
ELSE
Update the ‘OCSP Responder’ server name(s) for the group regular expressions.
Update the ‘OCSP Responder’ server name(s) for the group regular expressions.
In your favorite XML editor (mine is Notepad++), open the addendum pack(s), and find/replace for the following strings:
CAServer##
CERTIFICATESERVERS##
Save pack
Import and enjoy!
Documentation
ADCS 2016+ version agnostic pack download
ADCS 2012/2012R2 management packs download