Re: IIS cert denied

From: Joe (anonymous_at_discussions.microsoft.com)
Date: 09/09/04


Date: Wed, 8 Sep 2004 15:16:35 -0700

I really really appreciate this!!
I do not see anything but the stopped and start of the
Certcerv

There is one DTC here it is

Security Configuration (OFF = 0 and ON = 1):
      Network Administration of Transactions = 1,
      Network Clients = 0,
      Distributed Transactions using Native MSDTC Protocol
= 1,
      Transaction Internet Protocol (TIP) = 0,
      XA Transactions = 1

I think I better send the images.

1.Yes I am the administrator and I am logged in as one
2. I was able to generate a Cert for anyone who came to
the web to apply the certsrv e.g.
http://mydomain.com/certsrv I was issueing my own certs
for internal use. Same box
3. I was using the IIS manager as I have always done to
create a CSR to be intalled later from a commercial CA for
my E commerce web.

I will be sending the images

Thanks
Joe

>-----Original Message-----
>Joe,
>
>Please check event logs and see if there any event id's
related to
>certificate or ssl.
>
>Could you post it here(event logs if you see any)? Could
you send me the
>snap shot of error message. Send it to
ganeshanekar@rediffmail.com
>
>Few more questions:
>1.Are you logged in as administrator?
>2.Where is certificate services installed? on the same
box or another box?
>3.While generating request are you just preparing the
request and sending it
>later?
>
>Thanks.
>--
>Ganesh Anekar
>Microsoft Developer Support
>Internet Information Server
>**********************************************************
***********
>>>Please do not send email directly to this alias. This
is an online
>account name for newsgroup participation only.<<
>
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>You assume all risk for your use.
>
>© 2004 Microsoft Corporation. All rights reserved.
>**********************************************************
***********
>"Joe" <anonymous@discussions.microsoft.com> wrote in
message
>news:010801c495cc$66cf38a0$a401280a@phx.gbl...
>I did and it wont let me same errors no permission access
>denied.
>
>I have not seen this before.
>I installed the cert chain before and removed the root
>certs before I uninstalled. is this a problem? Because I
>got a few errors warning me not to delete them.
>
>Thanks Ganesh
>Joe
>>-----Original Message-----
>>Joe,
>>
>>As I understand you have removed certificate
>services...Please go ahead and
>>install it again.Then try creating certificate request.
>>
>>Could you try creating new certificate request from the
>website in IIS or in
>>web browser using http://>/certsrv
>>
>>HTH.
>>
>>Thanks
>>Ganesh Anekar
>>Microsoft Developer Support
>>Internet Information Server
>>*********************************************************
*
>***********
>>>>Please do not send email directly to this alias. This
>is an online
>>account name for newsgroup participation only.<<
>>
>>This posting is provided "AS IS" with no warranties, and
>confers no rights.
>>You assume all risk for your use.
>>
>>© 2004 Microsoft Corporation. All rights reserved.
>>*********************************************************
*
>***********
>>"Joe" <anonymous@discussions.microsoft.com> wrote in
>message
>>news:7b9901c49552$7b17a2e0$a601280a@phx.gbl...
>>Thanks for your reply
>>
>> I cannot find this in the services
>> a.. Start the Certificate Services service
>>
>>I did have the certificate authority configured at one
>>time here but I removed it. Anthing on this for the
cause?
>>
>>Thanks
>>Joe
>>
>>>-----Original Message-----
>>>Hello,
>>>
>>>Try this:
>>> a.. Start the Certificate Services service.
>>> b.. Grant Read and Enroll access for the template to
>>the appropriate user
>>>or group by using the Sites and Services snap-in. You
can
>>set the access
>>>rights on the Security tab by expanding the following
>>items: Services,
>>>Public Key Services, Certificate Templates. Note that
the
>>Show Services Node
>>>check box must be selected on the View menu to see the
>>Services tab.
>>>HTH.
>>>
>>>Thanks.
>>>Ganesh Anekar
>>>Microsoft Developer Support
>>>Internet Information Server
>>>********************************************************
*
>*
>>***********
>>>>>Please do not send email directly to this alias. This
>>is an online
>>>account name for newsgroup participation only.<<
>>>
>>>This posting is provided "AS IS" with no warranties, and
>>confers no rights.
>>>You assume all risk for your use.
>>>
>>>© 2004 Microsoft Corporation. All rights reserved.
>>>********************************************************
*
>*
>>***********
>>>"Joe" <anonymous@discussions.microsoft.com> wrote in
>>message
>>>news:7b6701c4952d$24687930$a301280a@phx.gbl...
>>>> Hello,
>>>>
>>>> I am using Server 2003 and was trying to create a new
>>cert
>>>> request. When I finish and the request is just about
to
>>be
>>>> generated I get the wizard saying:
>>>>
>>>> cannot generate request access denied.
>>>>
>>>> Well never have seen this one before.
>>>> I removed the machine name cert that is installed and
>>>> tried again
>>>> same thing.
>>>> So I checked the other sites to maybe think that I
>>forgot
>>>> something?
>>>> I even removed the cert from the administration site.
>>>>
>>>> Do I have to reinstall IIS here?
>>>>
>>>> Thanks
>>>> Joe
>>>
>>>
>>>.
>>>
>>
>>
>>.
>>
>
>
>.
>



Relevant Pages

  • Re: IIS cert denied
    ... I installed the cert chain before and removed the root ... >install it again.Then try creating certificate request. ... All rights reserved. ... >>Microsoft Developer Support ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS cert denied
    ... 2.Where is certificate services installed? ... 3.While generating request are you just preparing the request and sending it ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >Microsoft Developer Support ...
    (microsoft.public.inetserver.iis.security)
  • Re: Windows XP - IIS Access Denied 403
    ... This post is provided "AS-IS" with no warranties and confers no rights. ... Click the Directory Security tab and check ... >> see if a certificate is required. ... >> Microsoft Developer Support ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Windows XP - IIS Access Denied 403
    ... I would check the configuration of the Web site in IIS. ... see if a certificate is required. ... This post is provided "AS-IS" with no warranties and confers no rights. ... >> Microsoft Developer Support ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Issues with SSL on Win CE 5.0
    ... There is a Certificate in the HKCU under MY. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... creating the .pfx file, the private keys need to be marked as exportable ... the server certificate you're trying to add is present under ...
    (microsoft.public.windowsce.embedded)