Cannot Manage Certificate Services error message
- From: "Stevend" <StevenDFoster@xxxxxxxxxxxxx>
- Date: 20 Mar 2007 19:32:00 -0700
Hi All,
I’m Hoping someone might be able to help me on a Certificate
Installation issue.
I’m currently practicing installing Windows 2003 Certificate Service,
using both the MS Windows Server 2003 PKI & Certificate Security and
Windows 2003 Security books as reference materials. For all tense and
purposes the off-line Root CA has installed correctly (as far as I can
tell) and presumable so did the Enterprise Subordinate CA. However,
when I try to launch the subordinate CA to install the issued
certificate I get the following error messages “Cannot Manage
Certificate Services. The network path was not found. 0x80070035
(Win32:53)"
What I have done so far:
1) Reset the lab (DC, Root CA, and Subordinate CA) confirmed times
were correct and the DC and issuing CA server could see each other.
2) Confirmed the Root CA is in the Subordinate CA Certificate list
3) Recreated the CAPolicy.inf file for both the root and issuing
certificate server and then reinstalled the certificate services on
both (see below for CAPolicy.inf)
4) Raised the Domain function level to Windows Server 2003
5) Queried Google as well as MS for anything referencing the error
message. Found alot of users with the same issue, but none so far
included the fix.
6) Added the common name used for the subordinate CA into the DNS
server
Additional comments
I originally had the lab setup so each server had its on test box.
When I reset the lab, I installed it in a VM environment limiting it
to the three servers.
All three machines are running Windows 2003 Enterprise
The test domain is INTL.Westcoast.com
No other error messages were given on any of the servers
As such I’m stumped! I have included the CA Policy as well as the
script that I ran during the post install on the root CA. Any
suggestions you might have would be a great help.
** Root CA Policy **
[Version]
Signature="$Windows NT$"
[Certsrv_server]
Renewalkeylength=4096
RenewalValidityPeriodUnits=0x20
RenewalValidityPeriod=years
CRLPeriod=weeks
CRLPeriodUnits=26
CRLDeltaPeriod=days
CRLDeltaPeriodUnits=0
[CRLDistributionPoint]
Empty=true
[AuthorityInformationAccess]
Empty=true
*************************************
** Sub CA Policy**
[version]
Signature="$Windows NT$"
[Certsrv_Server]
Renewalkeylength=2048
RenewalValidityPeriodUnits=5
RenwealValidityPeriod=years
CRLPeriod=7
CRLPeriodUnits=days
CRLDeltaPeriod=1
CRLDeltaPeriodUnits=days
Thanks,
Steve
.
- Prev by Date: Re: basic firewall with TCP IP filtering
- Next by Date: Re: basic firewall with TCP IP filtering
- Previous by thread: Help Needed in getting Number of Unsuccessful attmepts by user
- Next by thread: Certificate Services: Windows 2000
- Index(es):
Relevant Pages
|
