Re: unable to request certificate

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 06/18/04 

Date: Fri, 18 Jun 2004 05:40:57 -0700

the second web enrollment issue is associated with kb article 323172. we
have published a new paper on troubleshooting web enrollment which should
help you:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:nr8Ac.62200$HG.55133@attbi_s53...
> To use the mmc certificate snapins you need to be using an Enterprise CA
that would
> be part of an AD domain. The Web Enrollment method should work but there
was a patch
> to fix the stall at the downloading ActiveX problem as shown in link
below.   --- 
> Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;330389
>
> "nick" <nwdurcholz@birklawfirm.com> wrote in message
> news:1d9bc01c453db$350c5380$a001280a@phx.gbl...
> > I have a development environment setup where I have a
> > standalone CA setup on a windows 2000 small business
> > server.  I need to obtain get new personal and website
> > certificates for testing purposes.  My user account has
> > administrator privileges on the server, the domain, and
> > the local computer.
> >
> > I try to request a new certificate in two ways, neither
> > of which is working.
> >
> > Method 1: Start->Run->certmgr.msc
> > ---------------------------------
> > When I try to request a certificate, I get the message:
> >
> > "The wizard cannot be started because of one or more of
> > the following conditions:
> >   -There are no trusted CAs available
> >   -You do not have the permissions to request
> > certificates from the available CAs
> >   -The available CAs issue certificates for which you do
> > not have permissions."
> >
> > I have the Root CA certificate of my test-CA installed in
> > the 'Trusted Root CAs' and 'Enterprise Trust' containers.
> >
> > Method 2: http://>/certsrv
> > ---------------------------------
> > I also tried to create an advanced request using the form
> > provided on the certificate server web
> > (http://>/certsrv/certrqma.asp), however, it just
> > sits there displaying the message ' Downloading ActiveX
> > control...  '
> >
> >
> > Can anybody find it in their heart to tell me what is
> > going wrong here.  This is becoming a serious impediment
> > to my current project.
>
>

Relevant Pages

  • Re: Web Certificate Enrollment security problem
    ... CERTSVC_DCOM_ACCESS security group of the server with the CA (have added ... The only thing that doesn't work is Web enrollment. ... access auditing and logging "issue and manage certificate requests" on the ... Have seen that there is a component "Certsrv Request" when launching ...
    (microsoft.public.security)
  • Re: Offline creation of machine certificates for VPN access
    ... You could let your remote users request via Web Enrollment. ... connect via pptp and then request a certificate via Web Enrollment ...
    (microsoft.public.windows.server.security)
  • Re: Requesting a certificate for another user
    ... we support this for smartcards in the web enrollment pages. ... customization of the web pages and some custom code. ... > I don't want to burden a user with certificate request. ...
    (microsoft.public.win2000.security)
  • Re: Certificate Services Web Enrollment requires admin access
    ... What fails - the certificate request or access to Web Enrollment? ... everyone has list permissions to the virtual website folder which by default would be ...
    (microsoft.public.win2000.general)
  • unable to request certificate
    ... administrator privileges on the server, the domain, and ... I try to request a new certificate in two ways, ... certificates from the available CAs ...
    (microsoft.public.win2000.security)