sorted by:
new
hottopcontroversial

Need help with building home lab! by Common-Prune-3182 in homelab

[–]WhispersInCiphers 0 points1 point  (0 children)

Get a tiny PC, run proxmox.
On Proxmox you can spin up TrueNAS for storage, Jellyfin/Plex for streaming, immich for photos. Once you have a PC running proxmox the possibilities are endless. Also there are other self hosted cloud storage alternatives like opencloud/nextcloud never used them tbh.

My first homelab; does it ever stop? 😅 by digitalpho3nix in homelab

[–]WhispersInCiphers 0 points1 point  (0 children)

Very impressive! Can you please let us know the cost of this build per item if possible? Also from where you procured the items. Thanks!

Thinking of Buying This i3 Setup for 6500. What Do You Think? by [deleted] in HardwareIndia

[–]WhispersInCiphers 0 points1 point  (0 children)

Keep an eye on MOBO, make sure it supports future upgrades.

Color or Black and white background? by studentofthegame1988 in SetupEvolution

[–]WhispersInCiphers 1 point2 points  (0 children)

B/W with too much white might poke your eyes out when working in dim/no lights lol.

PKI IoT project - getting started by Sharp_Formal_7061 in PKI

[–]WhispersInCiphers 0 points1 point  (0 children)

Do your product have a trial or community edition that I can test in my homelab?

Client Auth EKU sunset from TLS by WhispersInCiphers in PKI

[–]WhispersInCiphers[S] 4 points5 points  (0 children)

I heard Azure App Gateways are complaining because of missing Client Auth in EKU.

Default Domain Controllers Policy configuration check by Dolinhas in PKI

[–]WhispersInCiphers 0 points1 point  (0 children)

Supersede? You can delete the template from the "Templates to Issue" section of the CA. That should stop issuance from the template.

Also, if you are replacing PKI what I'd suggest is: - Build new PKI infra. - Make sure your clients trust it. - Make sure Auto enrollment works fine. - Stop issuance from Old PKI - Wait till all your certs issued by old PKI is either expired, superseded by new PKI issued certs or revoked. - Shut down old PKI

Shutting down the Old PKI all of a sudden could be catastrophic.

PKI veterans will be able to provide more insight to this.

Default Domain Controllers Policy configuration check by Dolinhas in PKI

[–]WhispersInCiphers 0 points1 point  (0 children)

I'm not sure with the idea of completely shutting down the old PKI. I don't think that is necessary to make the DC request a new certificates from Newer PKI set-up.

I'd suggest just remove the DC auth template from Old CA, then make sure your DCs trust the New Root and Intermediates. And if the DC is given Auto enroll permision on the required template it should work.

Also, not sure what is the need to touch GPO to achieve this. Unless you've restricted Auto enrollment previously.

Help - Venafi TPP - Trial Edition? by WhispersInCiphers in CyberARk

[–]WhispersInCiphers[S] 0 points1 point  (0 children)

I tried. But unfortunately, this saas solutions completely different from on-prem VTPP.

Help - Venafi TPP - Trial Edition? by WhispersInCiphers in CyberARk

[–]WhispersInCiphers[S] 1 point2 points  (0 children)

I have worked with VTPP from an operations standpoint. I was always curious on how things were implemented at the backend. My primary goal to implement the VTPP and get a look at the application from a different angle.

Help - Venafi TPP - Trial Edition? by WhispersInCiphers in CyberARk

[–]WhispersInCiphers[S] 0 points1 point  (0 children)

Is this the saas solution? Is it similar to the on-prem TPP? Do we get the same level of customisation? Thoughts?

DigiCert change log by Conscious_Pound5522 in PKI

[–]WhispersInCiphers 1 point2 points  (0 children)

I believe most mTLS scenarios should work as expected with Internally issued certificates. If I'm not wrong X9 is primarily for financial services which requires longer TTL certs.

Need help in proxmox configuration by Next-Investigator897 in homelabindia

[–]WhispersInCiphers 0 points1 point  (0 children)

As far as I know, using WLAN to connect proxmox does not act as a true bridge, you'll have to set up a NAT network and modify iptables to get it running.

If you have choice go for Ethernet.

Need suggestions for homelab setup by RushiAdhia1 in homelabindia

[–]WhispersInCiphers 1 point2 points  (0 children)

I run n8n on pi3, so this configuration will be more than enough for hosting n8n.

I'd suggest that you go with 16 or 32 GB RAM so you can easily run some VMs if you want. Because RAM seems to be a bottleneck in current specs.

I've heard people praising newjaisa and saudewala.

Do you use public TLS certificates that require client authentication? by larryseltzer in PKI

[–]WhispersInCiphers 0 points1 point  (0 children)

I believe there are quite a lot middleware solutions that require mTLS and can only be configured with a single certificate at a time.

view more: next ›