Re: Certificates Service: Web Enrollment Pages on another computer

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/28/04


Date: Wed, 28 Apr 2004 16:54:35 GMT

I am pretty sure that your problem is that since you are using an Enterprise CA, the
Web Enrollment Server needs to be a member of the domain in order to access AD and
probably trusted for delegation. --- Steve

"Mariano" <xmarv@inwind.it> wrote in message
news:%23xtD%238QLEHA.988@TK2MSFTNGP11.phx.gbl...
> Configuration
> -CA (enterprise CA) is installed on a pc (PC1) with Windows Server 2003
> Enterprise Edition (this computer is Domain Controller);
> -Web Enrollment Pages are installed on a host computer (PC2) member of
> domain;
>
> When I launch web enrollment pages from PC2 (http://localhost/certsrv) all
> works fine!
> when I launch web enrollment pages from PC3 (pc3 is not member of the
> domain) authenticating me with a domain account, I can navigate web pages
> but when I request a certificate the following error occurs:
>
>
> Your request failed. An error occurred while the server was processing your
> request.
>
> Contact your administrator for further assistance.
>
> Request Mode:
> newreq - New Request
> Disposition:
> (never set)
> Disposition message:
> (none)
> Result:
> Access is denied. 0x80070005 (WIN32: 5)
> COM Error Info:
> CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
> LastStatus:
> The operation completed successfully. 0x0 (WIN32: 0)
> Suggested Cause:
> The Certification Authority Service has not been started.
>
>
> In event viewer (system) of PC2 there is:
>
> DCOM got error "General access denied error " from the computer
> computername.domainname when attempting to activate the server:
> {D99E6E74-FC88-11D0-B498-00A0C90312F3}
>
>
> Help me.
> Thanks.
>
> Mariano.
>
>
>



Relevant Pages

  • Re: How could my program support enterprise CA?
    ... I Have done it, and i can get certificate from MS CA if my porgram is running on server, or if i am runnign from remote my remote PC has same user name and password as the server has. ... > You need to create a pkcs10 request and sign it using certificate request ... >> eg.sending a request to enterprise CA and then the enterprise CA issue ...
    (microsoft.public.platformsdk.security)
  • Certificate request problem
    ... I'm configuring my ISA Server to function as a L2TP/IPsec access server. ... when I try to request a new certificate from my Enterprise CA I get an ...
    (microsoft.public.isa.vpn)
  • [REVS] NTLM HTTP Authentication is Insecure By Design
    ... in front of a web server, and that proxy server shares a single TCP ... These are attacks that make use of non-RFC HTTP requests (HTTP Request ... the authentication is associated with the ...
    (Securiteam)
  • [NT] 04WebServer Multiple Vulnerabilities (CSS, Log File Injection, AUX DoS)
    ... 04WebServer is a HTTP server developed by Soft3304 for Windows platforms. ... Characters into Log File ... filtering on the request URL before writing it into the log file. ... following HTTP request, when submitted to a vulnerable 04WebServer, will ...
    (Securiteam)
  • Re: breaking the model
    ... > The forms data then is in the Request object. ... HTTP Request; in this case, the form POST Request from the Page. ... client and server. ...
    (microsoft.public.dotnet.framework.aspnet)