RE: Certificate Problem - Smart Card Logon

From: Bob Qin [MSFT] (bobqin_at_online.microsoft.com)
Date: 07/07/04

  • Next message: Ian W: "Security Tab Missing" 
    Date: Wed, 07 Jul 2004 09:23:16 GMT

    Hi Tim,

    Thanks for your posting here.

    Is your Domain Controller being issued the Domain Controller Authentication
    certificate? In Windows 2003, we introduced the Domain Controller
    Authentication template which is a version 2 template for 2003 Domain
    Controllers.

    If not, please enable Autoenrollment in the Default Domain Controllers
    policy.

    Computer Configuration >Windows Settings >Security Settings >Public Key
    Policies
    >Properties of Autoenrollment Settings. Enabled "Enroll certificates
    automatically"
    and "Update certificates that use the certificate templates".

    Wish it helps.

    Regards,
    Bob Qin
    Product Support Services
    Microsoft Corporation

    Get Secure! - www.microsoft.com/security

    ====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

  • Next message: Ian W: "Security Tab Missing"

    Relevant Pages

    • Re: Event ID 13 - automatic certificate enrollment error
      ... add Domain Controllers to it and check enroll ... > MMC for the certificate authority I can see the certificate templates ... > folder and when I select it I can then see Domain Controller on the ... > manage I can see the template Domain Controller. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Microsoft PKI: problem with autoenrollment for domain controllers
      ... Microsoft CAs are hard coded to request the Domain Controller certificate. ... WIndows SErver 2003 introduced the Domain Controller AUthentication certificate template, ...
      (microsoft.public.windows.server.security)
    • Issuing Domain Controller certificates manually
      ... this certificate template (as well as the Computer certificate ... generating a certificate request on the domain controller). ... If you use the web interface, you will notice that these two ...
      (microsoft.public.win2000.security)
    • Re: Event ID 13 - automatic certificate enrollment error
      ... I'm having problems understanding how to set permissions. ... MMC for the certificate authority I can see the certificate templates folder ... I can see the template Domain Controller. ...
      (microsoft.public.windows.server.active_directory)
    • RE: Certsrv and Autoenrollment problem
      ... Thank you for posting to the SBS Newsgroup. ... so it will not be instantiated on the template ... Certificate Authority snap-in will show the templates in the Certificate ... Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)