Certificate Authority problem with Win2k SP3

From: Mark Tellier (mtellier@nc.rr.com)
Date: 09/28/02 

From: "Mark Tellier" <mtellier@nc.rr.com>
Date: Sat, 28 Sep 2002 16:54:44 -0400

Symptom:
Install a Stand-alone root CA on Windows 2000 Server SP3, IE 6.0 (with or
without IE6 SP1). When a client access the server to request a certificate
at http://>/certsrv (on the Web Browser Certificate - Identifying
Information page) a message is displayed "Downloading ActiveX control..."
and the Web page never finishes updating.

I have now duplicated this with several fresh installs and get the same
results with the following clients, Windows XP IE 6.0, Windows XP SP1 IE 6.0
SP1, NT 4.0 SP 6a IE 5.5 SP2. The only client that works is Windows 98SE, IE
6.0 which prompts to install 2 certificates for Microsoft Certificate
Enrollment Control.

I have another server where a Stand-alone root CA is running fine on Windows
2000 SP2.

Microsoft has identified a simular problem in Q326782, but pertains to
legacy clients.

Mark Tellier
MCSE, CCEA

Relevant Pages

  • RE: 802.1x Authentication Fails
    ... Reason = The authentication request was not processed because the ... a default certificate is being sent to ... I queried the product team about this and they feel the server certificate ... which is causing the problem that the clients cannot ...
    (microsoft.public.internet.radius)
  • Re: Basic WEP/RADIUS/802.11 (Cisco/MS) question
    ... but I am interested in this whole Radius ... > I see that I can pull a Radius server out of the Microsoft Windows ... Cisco 1200 APs would be the RADIUS clients. ... a third party CA for your server certificate that your clients already ...
    (microsoft.public.internet.radius)
  • Re: subtext search in encrypted text
    ... > * clients access the system by communication with a application server ... both a client certificate and a server certificate. ... How secure is the memory of the phone? ...
    (sci.crypt)
  • Re: SMS 2003 SP1 Client Install Problem or Policy Retreival Problem?
    ... > Failed to find running shell process ... >> It is possible that the crypto store has somehow been corrupted. ... >>> The MP is setup and thousands of other clients have access. ... >>> Failed to find the certificate in the store, ...
    (microsoft.public.sms.admin)
  • Re: Dummies Guide for RADIUS/Certs
    ... I have set up IAS. ... client computers impacts certificate enrollment. ... configure Group Policy for domain member wireless clients so ... Cert Templates that is now enrolled on the IAS server. ...
    (microsoft.public.internet.radius)