Re: Certificate Services Issues

From: Paul Adare (padare_at_newsguy.com)
Date: 10/19/05 

Date: Wed, 19 Oct 2005 04:07:43 -0400

In article <#joXTBH1FHA.736@tk2msftngp13.phx.gbl>, in the
microsoft.public.windows.server.security news group, Matt
<mdframe@sorvive.DONT-SEND-SPAM.com> says...

> I am working in an environment where we have installed Certficiate Services
> on our Windows 2003 standard machine with Active Directory. We followed
> Mark Minasi's book on Windows Server 2003 but do not see the same template
> he uses in his client example. The drop down in his example has Server
> Authentication Cetificate as the type but that is not in the list nor can I
> find it in any of the templates.

Certificate templates are only supported when the CA is installed on a
Windows Server 2003 Enterprise Edition computer, not on Standard. That
would explain the disconnect.

>
> We generated a Web Server type since we believed that had the attributes we
> are looking for but have found an issue. We worked up a test where we
> signed a document with the new certfiicate without any issues but when we
> try to decrypt the payload we get "Key not valid for use in specified
> state". We are not sure what is going on and I am pretty sure the
> certfiicate we generated is the culprit. The application has been working
> fine for a year now in another environment where we generated our own key
> but that was under Windows 2000.

I don't understand what you're trying to do here. First you mention that
you're signing a document and then you're saying that you're trying to
decrypt the document. What exactly are you trying to do here, sign or
encrypt? 

-- 
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern 
computer geeks finds it impossible to detect a joke that is not clearly 
labeled as such."
Ray Shea

Relevant Pages

  • RE: Stop Error 0x0000008E after logging on locally
    ... > "STOP 0x0000008E" Error Message Occurs When You Upgrade to Windows Server ... > 840216 Stop 0x0000008e error occurs on a server that is running Microsoft ... try a clean boot of the server and see if the issue persists. ...
    (microsoft.public.windows.server.sbs)
  • Re: MSINFO32.exe will not open.
    ... At the command prompt, type net start helpsvc, and then press ENTER. ... Windows Server 2003: ... language versions of Windows Server 2003, such as the Japanese version of ... If the issue persists, please do clean boot on the SBS to narrow ...
    (microsoft.public.windows.server.sbs)
  • Re: In-place upgrade from NT to 2003, member server question
    ... I'm aware of the NT4Emulator key, but this is not the answer that I'm ... You say that "based on your experience, you needen't reboot the win2k member ... > use Windows Server 2003 interim Functional Level. ... > sufficient Windows 2k3 domain controllers, ...
    (microsoft.public.windows.server.migration)
  • Re: SBS2003 SP2 wizards not working
    ... Best practices and known issues when you install Windows Server 2003 Service ... This is a 'critical' class update targeted at all SBS ...
    (microsoft.public.windows.server.sbs)
  • Re: Installed 2 new hard drives now file copy is very slow
    ... tasks like open a Windows Explorer window and have to wait forever ... You seem to have Windows Server 2003 installed, ... Event Type: Error ... Event Source: Application Error ...
    (microsoft.public.windowsxp.perform_maintain)
Loading