Certificate Server Web Requests hang

From: NIC Student (nospam@nospam.land)
Date: 12/31/02 

From: "NIC Student" <nospam@nospam.land>
Date: Mon, 30 Dec 2002 22:23:16 -0800

Hi Folks,

I could use some new ideas to solve this problem:

I am trying to use the Certificate Services web to let my users get
certificates so they can use L2TP with our VPN.

Users connect as follows with IE6sp1: https://certserverdnsname/certsvr
They are local admins on their workstations, connect fine to the Win2000
web/CA server, they choose advanced, submit by form,
Administator/MBCP1/Signature/1024/Use local machine. We initially had the
problem of the ActiveX control hanging on the form, but the patches in
Q323172 fixed that problem. Now when the users click "submit", a green box
comes up and says "generating request". This message stays on the screen
and does not move on to communicating with the server, in fact nothing
happens. This also happens if logged in as a Domain Admin.

Here is my current workaround, which sucks:

Bring the computer to our internal network and join it to the domain,
install the certificates with the Certificates MMC and then pull the machine
off the domain. If the workstations join the domain over our PPTP VPN, they
don't seem to get the same Trusted Root Certification Auth. certificate and
things don't work after pulling it off the domain.

Win2000 environment, VPN server is ISA with SP1, Enterprise CA/Web server is
Win2000 SP3. Clients - all XPPro or 2000Pro, various service packs, all
behave the same. All clients and the CA/Web server have the patches from
Q323172 installed and all have been restarted. I set up a test environment
with a few machines and the darn problem exists there too!

Thanks in advance, 

-- 
Scott Baldridge
cross posted: win2000.ras & security

Relevant Pages

  • RE: VPN Problem, PC not Authenticating with Server
    ... is the VPN server, SBS or router? ... Regarding the configuration of L2TP VPN, please also refer to the following ... 818043 L2TP/IPsec NAT-T update for Windows XP and Windows 2000 ... Computer certificates for L2TP/IPSec VPN connections ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Problem, PC not Authenticating with Server
    ... do you mean you have configured L2TP/IPSec VPN ... is the VPN server, SBS or router? ... 818043 L2TP/IPsec NAT-T update for Windows XP and Windows 2000 ... Computer certificates for L2TP/IPSec VPN connections ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows 2003 VPN wont respond to packets forwarded by Linux router
    ... Win2K3 server? ... Do you have correctly marked external and internal network ... problem is in certificates, use MS CHAP v2 for test, till it works with MS ... > forwarded VPN traffic to a Windows 2000 Pro workstation. ...
    (microsoft.public.windows.server.networking)
  • Re: IAS / RRAS
    ... Install Certificate services ... Configure the VPN connectoid and set it for l2tp connections? ... So you may want to try to do without the IAS server until problems ... > are resolved to rule it out as a problem.As far as certificates, ...
    (microsoft.public.windows.server.networking)
  • Re: Secure VPN access
    ... with it's security option for the client. ... After getting the VPN connection I check the Ip settings and found the ... point to the head ISP's DNS server. ... > Computer certificates for L2TP/IPSec VPN connections ...
    (microsoft.public.windows.server.sbs)