Windows 2003 - Child domain cannot request certificate from root domain

Hi,

We have a forest setup (all servers are win2003) where we have one
root domain controller (actresses.net) and one child domain
(hot.actresses.net) controller.

Root domain has an Enterprise CA installed, and we are trying to allow
computers in the child domain to request certificates from the root
domain. We keep getting the same error message, no matter what we try.

After following the Certificate Request Wizard in the MMC Certificate
snap-in, the following error message appears.


---------------------------
Certificate Request Wizard
---------------------------
The certificate request failed because of one of the following
conditions:
- The certificate request was submitted to a Certification
Authority (CA) that is not started.
- You do not have the permissions to request certificates from the
available CAs.
---------------------------
OK
---------------------------


Apparently, as we have googled around, this message seems to have
several possible reasons to show up. We've tried changing all kinds of
permissions everywhere (templates, active directory) but without any
luck.

Would anyone have any clue of how work around this?

Any help is apreciated.

Thanks
Julio
.

Quantcast