Web Smart Card Enrollment failed from a distant host

From: Joel proal (jproal_at_free.fr)
Date: 06/23/03


Date: Mon, 23 Jun 2003 18:55:17 +0200


Hi,

I keep trying to generate certificate for user from a web page.
If I try from the CA server with a IE browser all is ok I can generate
certificate on a smartcard.
 From a other enrollment station (with same user login to the CA) I can
generate all kind of certificate but not "on behalf of another user
unsing Smart Card Enrollment Station"

The error is :
"An unexpected fatal error has occured: No templates could be found.
There are no CAs from which you have permission to request a
certificate, or an error occured while accessing the Active Directory."

The error seems to come from the document.SCrdEnrl.getCertTemplateCount
function call but I don't know what special permission I sould have to
run it....

I have tried:
http://support.microsoft.com/default.aspx?scid=kb;en-us;811418
http://support.microsoft.com/default.aspx?scid=kb;en-us;279781
http://support.microsoft.com/default.aspx?scid=kb;en-us;313274
without results.

Thanks for your help,

Joel



Relevant Pages

  • Web Smart Card Enrollment failed from a distant host
    ... I keep trying to generate certificate for user from a web page. ... If I try from the CA server with a IE browser all is ok I can generate ... From a other enrollment station I can ... function call but I don't know what special permission I sould have to ...
    (microsoft.public.win2000.security)
  • Re: How to starthandshake with client browser??
    ... >> And then what should i do to handshake with browser? ... > getting the browser to trust your certificate. ... 1-Open an SSL server Socket ... 2-Wait for a connection (from your client web browser). ...
    (comp.lang.java.programmer)
  • Re: username and Password sent as clear text strings
    ... I don't believe a certificate was every presented to the browser, I'll double check that when I get on the client site this morning. ... I completed a security review of a web server, ... Webscarab, like all intercepting web proxy programs I've used on ...
    (Pen-Test)
  • Re: Outlook Web Access / Remote Web Workplace
    ... I am unsure how the certificate process works, ... with what you type into the browser as that is the ... satisfied it is the one you expect to see, and if you install it, the ... generally the more dubious web sites which use only IP addresses, ...
    (microsoft.public.windows.server.sbs)
  • [Full-disclosure] Certificate spoofing issue with Mozilla, Konqueror, Safari 2
    ... This makes the user vulnerable to certificate spoofing by ... Assumed a phisher could redirect a user's browser to his prepared ... so the cert looks ok. ...
    (Full-Disclosure)