Re: unable to request certificate

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/17/04 

Date: Thu, 17 Jun 2004 03:43:15 GMT

To use the mmc certificate snapins you need to be using an Enterprise CA that would
be part of an AD domain. The Web Enrollment method should work but there was a patch
to fix the stall at the downloading ActiveX problem as shown in link below. ---
Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;330389

"nick" <nwdurcholz@birklawfirm.com> wrote in message
news:1d9bc01c453db$350c5380$a001280a@phx.gbl...
> I have a development environment setup where I have a
> standalone CA setup on a windows 2000 small business
> server. I need to obtain get new personal and website
> certificates for testing purposes. My user account has
> administrator privileges on the server, the domain, and
> the local computer.
>
> I try to request a new certificate in two ways, neither
> of which is working.
>
> Method 1: Start->Run->certmgr.msc
> ---------------------------------
> When I try to request a certificate, I get the message:
>
> "The wizard cannot be started because of one or more of
> the following conditions:
> -There are no trusted CAs available
> -You do not have the permissions to request
> certificates from the available CAs
> -The available CAs issue certificates for which you do
> not have permissions."
>
> I have the Root CA certificate of my test-CA installed in
> the 'Trusted Root CAs' and 'Enterprise Trust' containers.
>
> Method 2: http://>/certsrv
> ---------------------------------
> I also tried to create an advanced request using the form
> provided on the certificate server web
> (http://>/certsrv/certrqma.asp), however, it just
> sits there displaying the message ' Downloading ActiveX
> control... '
>
>
> Can anybody find it in their heart to tell me what is
> going wrong here. This is becoming a serious impediment
> to my current project.

Relevant Pages

  • Re: Computer and User Certificates Issues
    ... Enrollment of User Certificates using the custom v2 User Certificate Template ... I can NOT request the custom v2 Computer Cert nor the included v1 no ... Concerning permissions, these are the exact permissions I am using now: ...
    (microsoft.public.security)
  • Re: Cannot request computer certificate.
    ... request a computer certificate for about 9 months. ... and verify that you can get a computer/server certificate from it. ... List of NetBt transports currently bound to the Redir ... DNS Host Name: srvr3.domain.com ...
    (microsoft.public.windows.server.security)
  • RE: SIMple SSL question ??
    ... OK - i would also delete a cert request file lying around. ... But a certificate is a pub key + extra info. ... That said - if someone compromises the server he will also find a way to retrieve the private key. ... traffic between the initial web server and the client. ...
    (microsoft.public.dotnet.security)
  • Re: how can we restrict what certificate WSE will use?
    ... the valid x509 certificate which is used to identify him'. ... X509SecurityTokenManager to verify the request is from a trusted client. ... the problem is that he can not passed the authentication (suppose we ... > decrypte and signature validation process. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Web Certificate Enrollment security problem
    ... Enrollment works only with the NetBIOS Name and not with the FQDN. ... Svyatoslav Pidgorny, MS MVP - Security, MCSE ... access auditing and logging "issue and manage certificate requests" on ... Have seen that there is a component "Certsrv Request" when launching ...
    (microsoft.public.security)
Quantcast