Install Trusted Root Certificate in Windows silently

If you’re a sysadmin trying install a root certificate to devices for the purpose for SSL inspection, and you’re not wanting to leverage Group Policy for a widescale rollout just yet, here’s how you can script it to import silently via command line using your preferred administration tool:

certutil -enterprise -f -v -AddStore filename.crt

Replace filename.crt with the name or path to your certificate. No reboot should be required.

Fix for LinkIt PIN Pad Problems

The LinkIt application packaged by HID for connecting a PIN pad into TRISM and/or your customer onboarding application can sometimes lose its connectivity to the PIN pad. When it does, you may receive one of the following errors:

  • PIN block
  • Unable to Connect to Interface
  • Your onboarding application freezes when you try to retrieve the PIN

This script is something to be placed on the user desktop that ends the LinkIt process, instructs the user to disconnect and reconnect the PIN pad then wait for the Welcome message, and when they click OK it will re-start the LinkIt application.

It runs on both 32-bit and 64-bit Windows and runs LinkIt from the default installation directory in the Demoteller folder. No local administrator rights should be required, as long as the drivers for the PIN pad are already installed.

Github projects

I’ve been slowly adding some of my sysadmin creations to Github. Most of them will be scripts, many for Active Directory. You can find the section in the sidebar linking to each project, or use my profile page here:

Quick Disk Cleanup
0 forks.
1 stars.
0 open issues.
Recent commits:

Lesson learned: be careful flying a drone in the city, and at night, especially together and for the first time

So I tried to fly my drone, a Syma X5C, for the first time at night, and for the first time in the city… all in one night. It went rather poorly. The drone was nearly lost.

For one, my control range was very short – I assume due to RF interference. And once it got above the roof line, the wind swept it away. I spent the entire flight trying to get it to come back.

Luckily, I was able to slow the descent a little, I think it hit a roof, and then landed on the ground outside someone’s house. I was so lucky that I found it. It went about four streets over!

See video below.


Launch ‘Configure advanced user profile properties’ from Command Prompt

If you’re a Windows sysadmin in an environment with locked down user rights, and you want to perform an administrative action without needing to log out a current user, you can find yourself in a tight spot. Luckily, if you Shift-RightClick Command Prompt, click Run As another user, and login as your admin user, you can launch administrative tools all without needing to log out.

One such tool is the User Profiles window under Advanced system settings. To launch it from Command Prompt, type:

rundll32.exe sysdm.cpl,EditUserProfiles


Error Upgrading Fedora 27 to Fedora 28 with Cinnamon desktop

When attempting to upgrade my Fedora 27 to Fedora 28 running the Cinnamon desktop, I received the following error:

dnf system-upgrade download --releasever=28
Before you continue ensure that your system is fully upgraded by running "dnf --refresh upgrade". Do you want to continue [y/N]: y
Last metadata expiration check: 0:00:00 ago on Wed 02 May 2018 11:19:35 PM CDT.
Problem: package gstreamer1-plugins-bad-1:1.12.4-3.fc27.x86_64 requires, but none of the providers can be installed
- libchromaprint-1.2-8.fc27.x86_64 does not belong to a distupgrade repository
- problem with installed package gstreamer1-plugins-bad-1:1.12.4-3.fc27.x86_64

It turns out the name for this gstreamer plugins package has changed names, and it’s goofing up the dependencies path for libchromaprint. Minor issue, but it stops my upgrade cold.

I came up with this workaround: upgrade libchromaprint and gstreamer1-plugins-bad-free before trying to update the entire distro. So:

sudo dnf install libchromaprint-1.4.2-2.fc28.x86_64 gstreamer1-plugins-bad-free --releasever=28 --allowerasing

You can now proceed with your regular upgrade process.

VLC missing title bar and window decorations on Fedora 27

Recently, VLC Media Player on my Fedora 27 installation running the Cinnamon desktop has been missing the title bar and window decorations, resulting in VLC not being a proper window and only a full-screen application. For me, this behavior is undesirable.

VLC without title bar

To restore normal functionality it’s easiest to simply delete the VLC configuration:

rm -r ~/.config/vlc

Now, VLC will function normally. Preferences will have to be recreated, but if you’re like me, you don’t need much more than the ability to play media.

x11vnc – stack smashing detected

My x11vnc on Fedora has recently started crashing with the following error:

*** stack smashing detected ***: terminated

This issue seems to come and go for a lot of people with x11vnc. Bugs have been reported, but nobody seems to be able to pin it down. One workaround is to recompile it from source with some memory protections disabled, but that is a lot of work .

This workaround takes care of it: launch x11vnc with  -noxrecord on the end. That’s it!