Re: Users cannot download Root certificate from certsrv

From: Phil Bailey (pbailey_at_mindspring.com)
Date: 04/28/04


Date: Tue, 27 Apr 2004 20:53:46 -0400

We had a similar problem. Although it does not seem completely applicable
when you read this article, we found it fixed the problem 10 times out of
10.
http://www.microsoft.com/downloads/details.aspx?FamilyID=e8e33441-b6f4-4ee3-aff6-7cfc19b3354e&DisplayLang=en

I think this patch incorporates a change to xenroll.dll. (which is what the
ActiveX control is attempting to update). You can also change the
xenroll.dll version called in the Active server pages on your enrollment web
site. I think the file you'll find the version reference in is certdat.inc.
You may find back-revving the version it's calling for fixes your problem as
well. (which is better than trying to get this hotfix to all of your remote
users anyway ...)

Hope this helps you through the PKI school of hard knocks.

"Croco Stimpy" <none@none.com> wrote in message
news:O$GchvHKEHA.2576@TK2MSFTNGP12.phx.gbl...
> I have an enterprise CA. Users can download the root certificate as long
as
> they are inside the LAN, but users on the outside get an error message:
"The
> proper version of the activex control failed to download and install."
>
> I checked the KB and it said you need to be a local administrator on the
> machine you are installing the certificate on.
> I AM.
>
> It also said you need to have the web site for the certsrv in your Trusted
> Sites list.
> IT IS.
>
> I am at a loss as to what else to do.
>
>



Relevant Pages

  • Re: PhotoStory 3 released
    ... showing the download button. ... your security settings from IE>Tools>Internet Options>Security. ... >> *automatically* install an activeX control. ...
    (microsoft.public.windowsxp.moviemaker)
  • Re: ActiveX Controls
    ... So you are trying to do an "on line" install. ... >> activex control to download said software. ... >> the activex control ultimately ends up doing to your computer. ... >> Microsoft MVP Windows Shell/User ...
    (microsoft.public.windowsxp.general)
  • Re: PhotoStory 3 released
    ... >> And, of course, you have to lower your security settings ... > All I had to do was click the Download ... It means that you allowed an activeX control to automatically install ...
    (microsoft.public.windowsxp.general)
  • Re: PhotoStory 3 released
    ... >> And, of course, you have to lower your security settings ... > All I had to do was click the Download ... It means that you allowed an activeX control to automatically install ...
    (microsoft.public.windowsxp.moviemaker)
  • Re: Question on ports and Remote Desktop web access
    ... page, then any time I'm on a new computer that needs the ActiveX control, I ... go there first and download it, which only takes a few seconds. ... >> still not install from my host computer. ...
    (microsoft.public.windowsxp.work_remotely)