Re: SSL and Server Windows 2003

anonymous_at_discussions.microsoft.com
Date: 09/22/04 

Date: Wed, 22 Sep 2004 11:32:04 -0700

I setup Certificate CA and web enrollment thru the
windows comp. on windows 2003.

Where do I set the permissions to request a cert thru web
enrollment?

Ran the certificate wizard in iis to get the cert and it
seems to be functioning, when I request the site thru
http it states the page must be viewed over a secure
channel 403.4 forbidden ssl required. Though when I try
to use the https I just get a page cannot be found. The
page does function when I take ssl out of the picture.

Not sure where I am going wrong?
>-----Original Message-----
>Hi,
>
>You setup Windows 2003 Enterprise CA server?
>
>What permissions do you use to request the certificate
(to access the web
>enrolment page?)
>
>Why don't you request the certificate directly from IIS
(not using web
>enrolment)? You can do this as long as IIS is member of
domain and you have
>Enterprise CA server setup...
>
>Mike
>
>"zturtle" <anonymous@discussions.microsoft.com> wrote in
message
>news:0b8101c4a0b7$cd845e40$a401280a@phx.gbl...
>> When I try to request a certificate from the CA
>> authority
>>
>> Web enrollment page(same server as iis is installed
>>
>> member server to domain)I get this error:No certificate
>>
>> templates could be found. You do not have permission to
>>
>> request a certificate from this CA, or an error
occurred
>>
>> while accessing the Active Directory. I did some
>> research
>>
>> and found and article 811418 that basically states that
>>
>> the dnsHost attribute and sServerConfig need to be
>>
>> exactly the same case match which they are. I also
found
>>
>> a article mentioning a permissions problem but that was
>>
>> related to child domain. Any clues?
>
>
>.
>

Relevant Pages

  • Re: Computer and User Certificates Issues
    ... Enrollment of User Certificates using the custom v2 User Certificate Template ... I can NOT request the custom v2 Computer Cert nor the included v1 no ... Concerning permissions, these are the exact permissions I am using now: ...
    (microsoft.public.security)
  • Re: Cannot request computer certificate.
    ... you are using Windows 2003 see if there is any info in failed requests. ... I would run the support tool netdiag on your domain controller [at least ... I need to request a computer certificate for VPN server. ...
    (microsoft.public.windows.server.security)
  • Re: RPC Server Unavailable When Requesting Computer Certificate
    ... Brian explained what the solution was for Windows 2003 CA though that does ... certificate via Web Enrollment to request an offline ipsec certificate for ... his computer via an advanced certificate request and being sure to select ... >I don't believe there is any documentation but I have tried it in the past ...
    (microsoft.public.windows.server.security)
  • Re: Auto certificate and key generation to pfx
    ... Best Practices for implementing Windows Server 2003 PKI: ... Troubleshooting Certificate Status and Revocation whitepaper: ... Regarding the certificate request: ...
    (microsoft.public.platformsdk.security)
  • Re: RPC Server Unavailable When Requesting Computer Certificate
    ... Brian explained what the solution was for Windows 2003 CA though that does ... certificate via Web Enrollment to request an offline ipsec certificate for ... his computer via an advanced certificate request and being sure to select ... >I don't believe there is any documentation but I have tried it in the past ...
    (microsoft.public.security)