IIS 8 through IIS 10 don’t respect CTL list for client side certificate filtering

So lets say you’re moving from Windows 2008 R2 IIS 7.5 to something newer and you have Certificate Trust List (CTL) you use for CAC authentication. You’re used to that CTL being passed down to the client to then filter the user certificates on their system to only be the ones available that you want them to be. You migrate to Windows 2019 with IIS 10 and instead of that nice filtered list you instead get ALL certificates on a user’s system instead.

Continue reading “IIS 8 through IIS 10 don’t respect CTL list for client side certificate filtering” →

McAfee ENS + Windows 10 1903 + AMD GPU = Borked drivers

So you run McAfee ENS + Windows 10 1903 + AMD GPUs well you’ll discover that in this scenario the video drivers and AMD control software fail to load on your systems resulting in the default video driver loading. This results in the loss of multiple monitors and enhanced graphics capabilities. We worked with McAfee on this with an official case and in the end they blamed AMD even though if you uninstalled McAfee ENS the AMD drivers began loading. The solution in the end was AMD updating their drivers to resolve something that was having issues with the McAfee ENS software. You need to be running AMD Radeon Adrenaline 19.9.2 or newer to resolve this issue.

IIS 10 not serving (404.7) default document with File Name Extensions enabled

If you disable Allow unlisted file name extensions in IIS using the Request Filtering module you’ve always had to then allow “.” (just a period by itself) in the File Name Extensions to then allow IIS to feed up the default document without it being in the URL. For example http://www.google.com versus http://www.google.com/index.htm which without the . added won’t work. In IIS 10 on a couple of websites we found they would throw 404.7 errors when this was configured even with the . in the allow list.

Continue reading “IIS 10 not serving (404.7) default document with File Name Extensions enabled” →