Re: Standalone Subordinate Certificate Server Problems

From: D. Cross [MS] (vaq130@hotmail.com)
Date: 07/29/02 

From: "D. Cross [MS]" <vaq130@hotmail.com>
Date: Mon, 29 Jul 2002 06:49:19 -0700

can you reply by pasting in the sample request in a newsgroup posting so
that we can take a look at it?

(note there is no security sensitive information in the request) 

--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
"adrian cristea" <adriancristea@yahoo.com> wrote in message
news:uMG2AVWNCHA.2228@tkmsftngp08...
> i have the same problem with Jeff Kubik who posted the following message
in
> June 2001, except that i don't need the certificates for cisco and one of
> the servers is w2k advanced server.
>
> anyone found the answer to this problem?
>
> thanks.
>
> ***********************************************************************
> From: Jeff Kubik (jkubik@capita.com)
> Subject: Standalone Subordinate Certificate Server Problems
> Newsgroups: microsoft.public.win2000.security
>       View: (This is the only article in this thread) | Original Format
> Date: 2001-06-15 12:19:00 PST
>
> Hello,
>
> I am trying to set up a Standalone CA hierarchy consisting 2 Win2K
> servers (one
> acting as the Root while the other is the Subordinate).  I successfully
> setup the
> root CA to generate its root certificate.  I have also setup the
> subordinate CA
> to generate a certificate request message.  I have imported this message
> via the
> CertSrv webpage running on the root CA's IIS.  Likewise, I have
> generated a
> certificate for the subordinate CA.
>
> My dilemma occurs when I try to actually install the certificate on the
> subordinate CA.  Under the MMC window, I launched the certificate
> authority
> services.  After I selected the host icon representing my subordinate
> CA, I
> selected the task of installing the CA certificate.  Just after the
> software
> starts the process of trying to import this certificate, I am greeted by
> a win32
> error message window telling me that, "The format of the specified
> computer name
> is invalid."  Error code 1210.
>
> Does anyone know what specified computer this error is referring to?  I
> examined
> the contents of the x.509 certificate and I could not see anything out
> of the
> ordinary.  Likewise, if anyone knows where I can find more details
> concerning an
> error code 1210, that would be helpful.
>
> I am using this configuration to simply generate certs for a Cisco PIX
> integration and test lab.  Therefore, I do not need nor want to use the
> Enterprise CA solution available from Microsoft.
>
> Thanks for your assistance,
>
> Jeff Kubik, CISSP
> 410-715-9399
> ****************************************************************
>
>
>

Relevant Pages

  • Re: Wont update 0x8009310B
    ... The certificate request failed because of one of the following conditions? ... to a common symptom. ... Strictly on the basis of the error code my guess would be ...
    (microsoft.public.windowsupdate)
  • Certificate Server
    ... not you've installed a root CA or a subordinate CA. I'm ... certificate installed so that the services will operate ... certificate request for the CA. ... certificate and install that on the macine. ...
    (microsoft.public.win2000.security)
  • Re: Which certificate do I have to deploy ? Root CA or Subordinate CA certificate ?
    ... If a subordinate chains to a trusted root CA, ... Best bet is for your to read the certificate revocation and status checking whitepaper that describes how certificates are verified. ...
    (microsoft.public.windows.server.security)
  • Re: Question on chnaging the expiration date of certificates
    ... your Standalone RootCA is valid for 10 years ... your subordinate CA will only be able to issue certificates ... valid for maximum 1 year since its own certificate is valid for that period ... What you need to do is change the validity period on your RootCA to value ...
    (microsoft.public.win2000.security)
  • Re: W2K3 3-tier CA Implementation
    ... No matter what environment you are in, install a standalone ROOT CA. ... based on the standalone subordinate CA. ... I agree with issuing CAs being enterprise CAs. ... You do not use a certificate tempalte for the ...
    (microsoft.public.security)