Whats wrong with my CAPolicy.inf file?
- From: "Joe" <jwdaigle@xxxxxxxxxxxxx>
- Date: Thu, 6 Jul 2006 15:35:56 +0800
Hello there - I am creating a standalone Root CA (ie, offline), and created
a very simple CAPolicy.inf. It seems to be ignoring the settings in the inf
file. I have already checked to make sure its not CAPolicy.inf.txt :-)
The errors below from certmmc.log seem to indicate the file is found, but
that lines that are there are not read. I have looked at it for a while to
see if there is any kind of syntax error, but nothing pops out at me. Like
I said, the file is really simple.
Thanks for any help,
Joe
Here is the Inf file:
[Version]
Signature="$Windows NT$"
[certsrv_server]
Renewalkeylength=4096
RenewalValidityPeriodUnits=10
RenewalValidityPeriod=years
CRLPeriod=weeks
CRLPeriodUnits=26
CRLDeltaPeriodUnits=0
CRLDeltaPeriod=days
[CRLDistributionPoint]
Empty=True
[AuthorityInformationAccess]
Empty=True
[BasicConstraintsExtension]
PathLength=1
And here is the output from certmmc.log:
========================================================================
402.420.948: Begin: 7/6/2006 2:28 PM 54.718s
914.1439.0: certcli.dll: 5.2.3790.1830 retail (srv03_sp1_rtm.050324-1447)
914.1439.0: certmmc.dll: 5.2.3790.1830 retail (srv03_sp1_rtm.050324-1447)
402.315.949: End: 7/6/2006 2:28 PM 54.750s
========================================================================
402.420.948: Begin: 7/6/2006 2:31 PM 40.718s
914.1439.0: certcli.dll: 5.2.3790.1830 retail (srv03_sp1_rtm.050324-1447)
914.1439.0: certmmc.dll: 5.2.3790.1830 retail (srv03_sp1_rtm.050324-1447)
201.1061.237: Load Old Certificate: narraSoft Philippines Inc. Root CA(1):
0x1(1)
401.1276.946: Opened Policy inf: C:\WINDOWS\CAPolicy.inf
202.4431.271: Generate Keys: narraSoft Philippines Inc. Root CA(1):
Microsoft Strong Cryptographic Provider: 0x1000(4096)
202.2859.288: Set Key Security
401.1276.946: Opened Policy inf: C:\WINDOWS\CAPolicy.inf
401.1299.964: Closed Policy inf
401.1923.945: Policy inf missing section or key: certsrv_server:
RenewalValidityPeriodUnits: The required line was not found in the INF.
0x800f0102 (-2146500350)
201.1245.287: INF file error: The required line was not found in the INF.
0x800f0102 (-2146500350)
401.2345.945: Policy inf missing section or key: CRLDistributionPoint: URL:
The required line was not found in the INF. 0x800f0102 (-2146500350)
201.1245.287: INF file error: [CRLDistributionPoint] URL =: The required
line was not found in the INF. 0x800f0102 (-2146500350)
401.1532.945: Policy inf missing section or key: PolicyStatementExtension:
Policies: INF file line not found 0xe0000102 (INF: -536870654)
401.1607.944: Policy Statement Extension: INF file line not found 0xe0000102
(INF: -536870654)
401.1532.945: Policy inf missing section or key: CAPolicy: Policies: INF
file line not found 0xe0000102 (INF: -536870654)
401.1607.944: Policy Statement Extension: INF file line not found 0xe0000102
(INF: -536870654)
201.1245.287: INF file error: [PolicyStatementExtension] Policies =: INF
file line not found 0xe0000102 (INF: -536870654)
201.1245.287: INF file error: [CrossCertificateDistributionPointsExtension]:
INF file line not found 0xe0000102 (INF: -536870654)
401.2345.945: Policy inf missing section or key: AuthorityInformationAccess:
URL: The required line was not found in the INF. 0x800f0102 (-2146500350)
201.1245.287: INF file error: [AuthorityInformationAccess] URL =: The
required line was not found in the INF. 0x800f0102 (-2146500350)
401.2345.945: Policy inf missing section or key: EnhancedKeyUsageExtension:
OID: INF file line not found 0xe0000102 (INF: -536870654)
201.1245.287: INF file error: [EnhancedKeyUsageExtension] OID =: INF file
line not found 0xe0000102 (INF: -536870654)
201.1245.287: INF file error: INF file line not found 0xe0000102
(INF: -536870654)
201.1626.238: Clone Root Certificate
401.2345.945: Policy inf missing section or key: certsrv_server: The
required line was not found in the INF. 0x800f0102 (-2146500350)
201.1245.287: INF file error: [certsrv_server]: The required line was not
found in the INF. 0x800f0102 (-2146500350)
202.3514.230: Save certificate and Keys
201.365.232: Finish Supended Setup
201.782.234: Setup complete
201.2763.242: Renew CA -- new keys: narraSoft Philippines Inc. Root CA
401.1299.964: Closed Policy inf: [certsrv_server]
.
- Follow-Ups:
- Re: Whats wrong with my CAPolicy.inf file?
- From: Brian Komar
- Re: Whats wrong with my CAPolicy.inf file?
- Prev by Date: Re: Kerberos Error Getting Ticket From Domain: krb5kdc_err_s_principal_unknown
- Next by Date: Prevent Copying
- Previous by thread: Need solution to force all passwords in an OU to exipre, thereby forcing users to change password immediately
- Next by thread: Re: Whats wrong with my CAPolicy.inf file?
- Index(es):
Relevant Pages
|