Check to make sure the following services are NOT disabled, and start them-
Device Install Service
Device Setup Manager
Device Association Service
Check to make sure the following services are NOT disabled, and start them-
Device Install Service
Device Setup Manager
Device Association Service
- Open up powershell-
$rootcert = New-SelfSignedCertificate -Type Custom `
-Subject "CN=ASARoot" `
-KeyExportPolicy Exportable `
-KeySpec Signature `
-HashAlgorithm sha256 `
-KeyLength 2048 `
-CertStoreLocation "Cert:\CurrentUser\My" `
-KeyUsageProperty Sign `
-KeyUsage CertSign
- Run MMC, add Certficiates, User, go to personal, Export, no to private key, pick Base-64 encoded, save file.
- Log into ASA-
MyASA(config)# crypto ca trustpoint ASACERT
MyASA(config-ca-trustpoint)# no ca-check
MyASA(config-ca-trustpoint)# enrollment terminal
MyASA(config-ca-trustpoint)# no id-usage
MyASA(config-ca-trustpoint)# exit
MyASA(config)# crypto ca authenticate ASACERT
- Log into ASDM, Network Client Access, Anyconnect Connection Profiles, select profile and click Edit, set authentication to certificate only.
Field Test Mode- *3001#12345#*, Call.
Get IMEI- *#06#
Get Data Usage- *3282# or #3282
Bill Balance- *225# or #225 or #225#
Reinstall CU 23-
.\setup.exe /m:upgrade /IAcceptExchangeServerLicenseTerms
Windows Update Fails with error 80072efe. Looking at get-windowsupdatelog, you see windows unable to access a URL that begins with sls.update.microsoft.com.
If you open https://sls.update.microsoft.com in internet explorer, you this page can't be displayed.
SOLUTION-
Open HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL
Delete Functions key. Reboot.
You're welcome. This took me FOREVER to find.
Information on Exploit-
https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/
Alternate Mitigation-
https://msrc-blog.microsoft.com/2021/03/05/microsoft-exchange-server-vulnerabilities-mitigations-march-2021/
Script to check server-
https://github.com/microsoft/CSS-Exchange/tree/main/Security
Microsooft Safety Scanner-
https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download