Picture of Tony La Grassa

Tony La Grassa

Tony La Grassa rigorously analyzes each organization’s technology environment and objectives to achieve a best-fit, comprehensive solution the first time around. He is well-versed in Microsoft products such as Active Directory and Azure. His broad knowledge base includes PKI, AD-related tech, certificate lifecycle management, hardware security modules, scripting, and automation.

Getting Ahead of the Client Authentication EKU Sunsetting in TLS Certificates

As industries evolve, so too does the implementation of their existing technologies. Public Key Infrastructure (PKI) is no different. Many organizations are preparing for the widely anticipated Client Authentication EKU [...]

Setting Up Microsoft Intune Cloud PKI: Part 2

As I discussed in my previous post on Microsoft Intune Cloud PKI, it’s important to understand how to perform the operational tasks required to keep the PKI functioning in the [...]

Leveraging Azure Blob Storage for Your PKI Needs, Part 2: Automation

This blog post is a follow up to my previous post on leveraging Azure Blob Storage to serve HTTP certificate revocation lists (CRLs). If you have not already done so, [...]

Setting Up Microsoft Intune Cloud PKI

Many organizations are interested in leveraging the benefits and security that come with a public key infrastructure (PKI). While internal PKIs are incredibly powerful and are often a de facto [...]

Azure Protection

ESC15 Vulnerability: Identifying and Protecting Your AD CS PKI

Update Since Posting On November 12, 2024 Microsoft released an official fix to ESC15. Additional information can be found in the Microsoft Security Response Center. Background Although many organizations rely [...]

Highly Available, Secure, and Convenient: Leveraging Azure Blob Storage for your PKI Needs, Part 1

For as long as public key infrastructure (PKI) has existed, it has relied on certificate revocation lists (CRLs) and authority information access (AIA). CRLs are a fundamental part of most [...]

How to Sync Time in Active Directory

[VIDEO] [VIDEO] https://www.youtube.com/watch?v=xq8lAP1a9bM In this video, Ravenswood Senior Consultant Tony LaGrassa LaGrassa discusses the often overlooked but fundamental topic, time synchronization. He also delves into how you can properly configure [...]

Securing On-Premises Access Is Easier Than You Think: Utilizing the Entra Application Proxy

In a previous blog post , we discussed taking advantage of Entra (formerly Azure Active Directory) Application Proxies to allow access to on-premises applications without a dependency on traditional tools [...]

Network Time Protocol Configurations: A Deeper Dive

In my previous blog post we reviewed why time synchronization is important, as well as proper time synchronization configuration of domain controllers (DCs) holding the Primary Domain Controller Emulator (PDCe) [...]

In Sync: Proper Active Directory Time Sync Methods

Time synchronization is an important yet sometimes overlooked part of security. Ensuring proper time settings is paramount to security in unexpected ways. [...]