Re: Certificate enrollment XEnroll failure

From: MrC (anonymous_at_discussions.microsoft.com)
Date: 04/07/05

  • Next message: erha: "Re: Default Container for Smart Card based Certificate" 
    Date: Wed, 6 Apr 2005 22:39:10 -0700

    Yes it was Certficate Server 1.0 running on the NT 4.0
    Server.

    Thanks for the reply.

    MrC.

    >-----Original Message-----
    >I assume you are using Certificate Server 1.0 on NT 4.0?
    Enrollment from an
    >NT 4.0 Server is no longer supported. It was also not
    updated with the newer
    >versions of xenroll.dll. You will have to upgrade the
    server to Windows
    >2000.
    >
    >--
    >David B. Cross [MS]
    >--
    >This posting is provided "AS IS" with no warranties, and
    confers no rights.
    >
    >
    >Top Whitepapers:
    >
    >Auto-enrollment whitepaper:
    >http://www.microsoft.com/technet/prodtechnol/windowsserver
    2003/technologies/security/autoenro.mspx
    >
    >Best Practices for implementing Windows Server 2003 PKI:
    >http://www.microsoft.com/technet/prodtechnol/windowsserver
    2003/technologies/security/ws3pkibp.mspx
    >
    >Troubleshooting Certificate Status and Revocation
    whitepaper:
    >http://www.microsoft.com/technet/security/topics/crypto/ts
    htcrl.mspx
    >
    >Windows Server 2003 web enrollment and troubleshooting
    guide:
    >http://www.microsoft.com/technet/prodtechnol/windowsserver
    2003/technologies/security/webenroll.mspx
    >"MrC" <anonymous@discussions.microsoft.com> wrote in
    message
    >news:1ea401c538c2$22ab26e0$a601280a@phx.gbl...
    >> Hi,
    >>
    >> From WinNT 4.0 Workstations I am able to successfully
    >> enroll for certificates from an NT 4.0 Server.
    >>
    >> However, I have a Win2K machine with SP4 and IE 5 trying
    >> to enroll for a certificate from the same NT 4.0 Server,
    >> but whenever I click on the advanced button I get the
    >> error:
    >>
    >> VBScript: Xenroll
    >> "The enrollment control did not successfully download to
    >> your machine. These pages require the control and will
    not
    >> work correctly without it."
    >> Retry or Cancel
    >>
    >> If I click the Submit Request button I get the error:
    >>
    >> VBScript: CERTIFICATE SERVER
    >> "You have submitted an empty string which indicates that
    >> an error has ocured on your machine. Please verify that
    >> the data you have submitted is valid and that a PKCS10
    is
    >> being correctly generated by your machine."
    >> Ok
    >>
    >> The Win2k PC is running XEnroll.dll version
    5.131.3659.0.
    >>
    >> Is it possible for a Win2K PC to enroll for a
    certificate
    >> from a Win NT 4.0 Server?
    >>
    >> Thanks,
    >> CA.
    >>
    >
    >
    >.
    >

  • Next message: erha: "Re: Default Container for Smart Card based Certificate"

    Relevant Pages

    • Re: Certificate Templates - Duplicating template - Issue does not work
      ... Enterprise Edition if you need to modify your certificate templates. ... Implementing and Administering Certificate Templates in Windows Server 2003 ...
      (microsoft.public.win2000.security)
    • SEC_E_UNTRUSTED_ROOT
      ... To test my application I have set up a Windows 2000 server ... application and client application are running on the same Windows server. ... certificate and then "imported" it and still the same result. ...
      (microsoft.public.platformsdk.security)
    • Re: CA - Certificate Authority for Authentication?
      ... you can use CA to deploy user certificate in combination with e.g. ... Here are some white papers on how to set up CA server ... Implementing and Administering Certificate Templates in Windows Server 2003 ... You can use Smart Card for remote logons to domain, terminal servers, VPN, ...
      (microsoft.public.windows.server.networking)
    • Re: CA - Certificate Authority for Authentication?
      ... you can use CA to deploy user certificate in combination with e.g. ... Here are some white papers on how to set up CA server ... Implementing and Administering Certificate Templates in Windows Server 2003 ... You can use Smart Card for remote logons to domain, terminal servers, VPN, ...
      (microsoft.public.windows.server.networking)
    • Re: require client certificates SSL
      ... Here are some articles on how to set up Microsoft CA and how to deploy ... Implementing and Administering Certificate Templates in Windows Server 2003 ... Advanced Certificate Enrollment and Management ...
      (microsoft.public.inetserver.iis.security)