{"id":19750,"date":"2023-08-18T07:11:28","date_gmt":"2023-08-18T11:11:28","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=19750"},"modified":"2023-08-18T08:22:39","modified_gmt":"2023-08-18T12:22:39","slug":"adcs-addendum-packs","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/","title":{"rendered":"ADCS Addendum packs"},"content":{"rendered":"
\"ADCS<\/a>
ADCS ‘gift’ certificate – don’t we all wish!<\/figcaption><\/figure>\n

If only certificates were all gift certificates!\u00a0 The ‘ADCS Addendum packs’ disables noisy rules, adds OCSP seed, OCSP responder and OCSP group (classes).\u00a0 Recovery and service monitoring and nCipher event are the main highlights reducing alerts for ADCS 2012,2012R2,2016+.\u00a0 My thanks to Bob Williams CSA<\/a>, for the assist!<\/p>\n

 <\/p>\n

Quick Download(s)<\/h4>\n

2012 \u00a0HTTPS:\/\/GITHUB.COM\/THEKEVINJUSTIN\/ADCS2012QAddendum<\/a><\/h4>\n

2012R2 HTTPS:\/\/GITHUB.COM\/THEKEVINJUSTIN\/ADCS2012R2ADDENDUM\/<\/a><\/h4>\n

2016+ https:\/\/github.com\/theKevinJustin\/ADCS2016-Addendum<\/a><\/h4>\n

<\/h2>\n

 <\/p>\n

Overview of addendum capabilities<\/h2>\n

Remember the why addendum packs<\/a> for guiding purpose, transform!<\/p>\n

The ADCS Addendum packs discover OCSP (seed class), and OCSP responder registry keys installed on monitored servers.<\/p>\n

\"OCSP<\/a>
OCSP seed class<\/figcaption><\/figure>\n

Group discovery tailors OCSP classes, for subscription or alert tuning.<\/p>\n

\"OCSP<\/a>
OCSP server group can be used for subscription, or alert tuning (depending on class targets)<\/figcaption><\/figure>\n

Monitors and service recoveries keep OCSP services monitored, and only alert when manual intervention is required.<\/p>\n

\"OCSP<\/a>
OCSP service, certsvc monitors and service recovery automations built in<\/figcaption><\/figure>\n

 <\/p>\n

 <\/p>\n

Tailoring the pack(s) to your environment<\/h2>\n

First, you must have at least ONE (1) set of ADCS Active Directory Certificate Services management packs so the ‘ADCS Addendum pack’ will load.\u00a0 The three versions currently supported have addendums, hopefully 2012,2012R2 are planned to be decommissioned in the short term.<\/p>\n

Second, if you don’t have OCSP in your environment, download, and then import into your environment –<\/p>\n

ELSE<\/p>\n

Update the ‘OCSP Responder’ server name(s) for the group regular expressions.<\/p>\n

 <\/p>\n

Update the ‘OCSP Responder’ server name(s) for the group regular expressions.<\/h3>\n

In your favorite XML editor (mine is Notepad++), open the addendum pack(s), and find\/replace for the following strings:<\/p>\n

CAServer##<\/p>\n

CERTIFICATESERVERS##<\/p>\n

 <\/p>\n

Save pack<\/p>\n

Import and enjoy!<\/p>\n

 <\/p>\n

Documentation<\/h4>\n

ADCS 2016+ version agnostic pack download<\/a><\/p>\n

ADCS 2012\/2012R2 management packs download<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

If only certificates were all gift certificates!\u00a0 The ‘ADCS Addendum packs’ disables noisy rules, adds OCSP seed, OCSP responder and OCSP group (classes).\u00a0 Recovery and service monitoring and nCipher event are the main highlights reducing alerts for ADCS 2012,2012R2,2016+.\u00a0 My thanks to Bob Williams CSA, for the assist!   Quick Download(s) 2012 \u00a0HTTPS:\/\/GITHUB.COM\/THEKEVINJUSTIN\/ADCS2012QAddendum 2012R2 HTTPS:\/\/GITHUB.COM\/THEKEVINJUSTIN\/ADCS2012R2ADDENDUM\/ … Continue reading “ADCS Addendum packs”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[637,2,567,5,7,545,530],"tags":[732,527,86,528,242,730,733,731,324],"class_list":["post-19750","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-administration","category-authoring","category-best-practice","category-mp-management-pack","category-powershell","category-scom","tag-7031-service-events","tag-adcs","tag-certificate","tag-certificate-services","tag-monitors","tag-ocsp","tag-ocsp-group","tag-ocsp-responder","tag-recovery"],"yoast_head":"\nADCS Addendum packs - Kevin Justin's Blog<\/title>\n<meta name=\"description\" content=\"Time to tune the ADCS Addendum packs to add OCSP monitoring and tune noisy rules in the Active Directory Certificate Services packs\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ADCS Addendum packs - Kevin Justin's Blog\" \/>\n<meta property=\"og:description\" content=\"Time to tune the ADCS Addendum packs to add OCSP monitoring and tune noisy rules in the Active Directory Certificate Services packs\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-18T11:11:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-18T12:22:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/ADCS-gift-certificate.jpg\" \/>\n<meta name=\"author\" content=\"WordPress Administrator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WordPress Administrator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/\"},\"author\":{\"name\":\"WordPress Administrator\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"headline\":\"ADCS Addendum packs\",\"datePublished\":\"2023-08-18T11:11:28+00:00\",\"dateModified\":\"2023-08-18T12:22:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/\"},\"wordCount\":331,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/ADCS-gift-certificate.jpg\",\"keywords\":[\"7031 service events\",\"ADCS\",\"certificate\",\"Certificate Services\",\"monitors\",\"OCSP\",\"OCSP group\",\"OCSP responder\",\"recovery\"],\"articleSection\":[\"Active Directory\",\"Administration\",\"Authoring\",\"Best Practice\",\"MP Management Pack\",\"PowerShell\",\"SCOM\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/\",\"name\":\"ADCS Addendum packs - Kevin Justin's Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/ADCS-gift-certificate.jpg\",\"datePublished\":\"2023-08-18T11:11:28+00:00\",\"dateModified\":\"2023-08-18T12:22:39+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"description\":\"Time to tune the ADCS Addendum packs to add OCSP monitoring and tune noisy rules in the Active Directory Certificate Services packs\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/ADCS-gift-certificate.jpg\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/ADCS-gift-certificate.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adcs-addendum-packs\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ADCS Addendum packs\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin's Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\",\"name\":\"WordPress Administrator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"caption\":\"WordPress Administrator\"},\"sameAs\":[\"https:\\\/\\\/kevinjustin.com\"],\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/wordpress_admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ADCS Addendum packs - Kevin Justin's Blog","description":"Time to tune the ADCS Addendum packs to add OCSP monitoring and tune noisy rules in the Active Directory Certificate Services packs","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/","og_locale":"en_US","og_type":"article","og_title":"ADCS Addendum packs - Kevin Justin's Blog","og_description":"Time to tune the ADCS Addendum packs to add OCSP monitoring and tune noisy rules in the Active Directory Certificate Services packs","og_url":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/","og_site_name":"Kevin Justin's Blog","article_published_time":"2023-08-18T11:11:28+00:00","article_modified_time":"2023-08-18T12:22:39+00:00","og_image":[{"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/ADCS-gift-certificate.jpg","type":"","width":"","height":""}],"author":"WordPress Administrator","twitter_card":"summary_large_image","twitter_misc":{"Written by":"WordPress Administrator","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/"},"author":{"name":"WordPress Administrator","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"headline":"ADCS Addendum packs","datePublished":"2023-08-18T11:11:28+00:00","dateModified":"2023-08-18T12:22:39+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/"},"wordCount":331,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/ADCS-gift-certificate.jpg","keywords":["7031 service events","ADCS","certificate","Certificate Services","monitors","OCSP","OCSP group","OCSP responder","recovery"],"articleSection":["Active Directory","Administration","Authoring","Best Practice","MP Management Pack","PowerShell","SCOM"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/","url":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/","name":"ADCS Addendum packs - Kevin Justin's Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/ADCS-gift-certificate.jpg","datePublished":"2023-08-18T11:11:28+00:00","dateModified":"2023-08-18T12:22:39+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"description":"Time to tune the ADCS Addendum packs to add OCSP monitoring and tune noisy rules in the Active Directory Certificate Services packs","breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/ADCS-gift-certificate.jpg","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/ADCS-gift-certificate.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adcs-addendum-packs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"ADCS Addendum packs"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin's Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508","name":"WordPress Administrator","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","caption":"WordPress Administrator"},"sameAs":["https:\/\/kevinjustin.com"],"url":"https:\/\/kevinjustin.com\/blog\/author\/wordpress_admin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19750","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=19750"}],"version-history":[{"count":5,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19750\/revisions"}],"predecessor-version":[{"id":19762,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19750\/revisions\/19762"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=19750"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=19750"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=19750"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}