Re: Migrating Standalone CA to Win2003

From: Vishal Agarwal[MSFT] (vishala_at_online.microsoft.com)
Date: 01/30/04 

Date: Fri, 30 Jan 2004 11:36:05 -0800

Can you make sure that "Enable Session State" is enabled for CertSrv web
site in IIS? 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights
"C.Dimitrov" <anonymous@discussions.microsoft.com> wrote in message
news:3ba901c3e39f$0c15db10$a101280a@phx.gbl...
> Hi,
>
> We have installed Standalone CA on Windows 2000 Adv Srv SP3
> After we install Windows 2003 Standalone CA, we shut
> certsrv down and move the CAs database from 2000 to 2003.
> After starting 2003 CA, everthing was fine, we had all the
> keys safe and working. After 2 weeks workin correctly it
> start saying CA is going offline and can not serve
> requests, we found we have shutted down the 2000 Adv
> Server from the network. Then I saw in the EventLog it is
> complaining about the CRL location, by default it was
> file:// I added all possible LDAP:// and http:// restarted
> it. Renew the CAs certificate changing the CRL now on the
> current server, and W2K Professional was able to find the
> trust now. But we got this when trying to enroll a
> certificate from the web or by clicking on Download CA
> Certificate.
>
> Contact your administrator for further assistance.
> Failed to create 'CertificateAuthority.Request' object.
>
> By logging with the Domain\Domain Admin account for this
> domain I was able locally to request a certificate.All
> other accounts logged in or browse on the web to use the
> Web Enrollment funcitons gives above error.
> Any clue what wrong I did and how to correct this?
>
> Regards,
> Constantin
>

Relevant Pages

  • Re: Strange CA error
    ... account (one used to access the Certsrv Web) doesn't have permissions to any ... > I managed to produce the first certificate fine through web enrollment. ... > No certificate templates could be found. ...
    (microsoft.public.security)
  • Re: OWA Certificate
    ... > Hi Mark ... I created a certificate which seemed to go fine with no errors. ... Enable session state on the certsrv virtual directory. ...
    (microsoft.public.exchange.misc)