Cannot request computer certificate.



Hi,

BTW, this is kind of a repost. I wouldn't normally do this but I am
panicing. I have already tried to call MS for technical support but the
operator would not transfer my call because it was almost 18:00. So now I
am stuck. I need to request a computer certificate for VPN server.
However, I get the the following error message:

The certificate request failed because of one of the following conditions:
-The certificate request was submitted to a Certification Authority (CA)
that is not started.
-You do not have the permissions to request certificates from the available
CAs.

It has got to be the second one. But how would I have lost permission? I
have gone absolutely balmy by granting myself and my PC full control to the
Computer and Enrollment Agent (computer) templates. Still not happening.
The CA can successfully request certificates from itself, but all remote PCs
fail, even DCs.

Why me?!! Please help!!


.



Relevant Pages

  • Re: Computer and User Certificates Issues
    ... Enrollment of User Certificates using the custom v2 User Certificate Template ... I can NOT request the custom v2 Computer Cert nor the included v1 no ... Concerning permissions, these are the exact permissions I am using now: ...
    (microsoft.public.security)
  • Re: Cannot request computer certificate.
    ... request a computer certificate for about 9 months. ... and verify that you can get a computer/server certificate from it. ... List of NetBt transports currently bound to the Redir ... DNS Host Name: srvr3.domain.com ...
    (microsoft.public.windows.server.security)
  • RE: SIMple SSL question ??
    ... OK - i would also delete a cert request file lying around. ... But a certificate is a pub key + extra info. ... That said - if someone compromises the server he will also find a way to retrieve the private key. ... traffic between the initial web server and the client. ...
    (microsoft.public.dotnet.security)
  • Re: how can we restrict what certificate WSE will use?
    ... the valid x509 certificate which is used to identify him'. ... X509SecurityTokenManager to verify the request is from a trusted client. ... the problem is that he can not passed the authentication (suppose we ... > decrypte and signature validation process. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Web Certificate Enrollment security problem
    ... Enrollment works only with the NetBIOS Name and not with the FQDN. ... Svyatoslav Pidgorny, MS MVP - Security, MCSE ... access auditing and logging "issue and manage certificate requests" on ... Have seen that there is a component "Certsrv Request" when launching ...
    (microsoft.public.security)