certificate request failed (CA not started? permissions?)

From: Ivo (Ivo_at_discussions.microsoft.com)
Date: 02/21/05


Date: Mon, 21 Feb 2005 14:15:02 -0800

I keep getting the message: The certificate request failed because one of the
following conditions:
- The certificate request was submitted to a Certification Authority (CA)
that is not started. (OR)
- You do not have the permissions to request certificates from the available
CAs.

I'm having this problem on my notebook (using my account and also as
administrator), the SBS2003 is the CA. When I do this on another (desktop) PC
with the same credentials it works OK.

The problem is somehow linked to my notebook, a PC in the same network can
request the certificates (machine and user) all right. When I bring my
notebook to
another domain, I have the same error message. I can install the certificate
from the web interface (//servername/certsrv) but this allows me to install
the user
certificates only, I don't see how I can select the machine certificate using
the web interface.So "the CA is definitely started" and I'm logged on as
domain (and therefore local machine) admin so it cannot be that I do not have
the necessary rights.

So what's wrong with my notebook reaction to certificates.
It's running XP SP2 and the domain server (also the Root CA) is SBS2K3 on my
home system and SBS2K where I ran the tests this afternoon.

Suggestions on this matter are highly appreciated...
Ivo



Relevant Pages

  • RE: SIMple SSL question ??
    ... "Remove the certificate request file and store the SSL certificate file in a ... The private key is not passed in the certificate request, ...
    (microsoft.public.dotnet.security)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • Re: SSL certificate and IIS problems - HELP!
    ... when you created the certificate request using the IIS ... the response file MUST match the request as no-one else has even ...
    (microsoft.public.win2000.security)
  • Re: IIS cert denied
    ... >2.Where is certificate services installed? ... All rights reserved. ... >>install it again.Then try creating certificate request. ... >>Microsoft Developer Support ...
    (microsoft.public.inetserver.iis.security)