FIM 2010 problem issuing SC
Hello, I have a problem with issuing Smart Card on FIM 2010 System. In the step of EXECUTE the approved request I got this error: "Processing error: Error generating requesting certificates. The parameter is incorrect. 0x80070057 " Please help to solve this problem.
February 22nd, 2011 6:35pm

Hi OLGN, can you verify connectivity between the FIM CM server (database) & the CA. Cheers, MMS_guruIdentity & Metadirectory, Hewlett-Packard UK
Free Windows Admin Tool Kit Click here and download it now
February 22nd, 2011 7:01pm

How to verify this connection? If UDL file is good? From the FIM system i can see the CA Server and templates of CA.
February 22nd, 2011 7:38pm

What you need to do is verify that the connection from the CA server to the FIM CM database is valid: 1- Restart the CA and check the FIM Certificate Manager event log 2- Ensure that the are no errors recorded regarding the CA's exit module 3- Verify the SQL server. Check that a record exists for the CA computer account in the CertificateAuthority table. Non existance points to an incorrect Exit module or lack of a CA Computer account SQL login 4. Ensure that the CA computer account has been assigned a SQL login (domain\CAComputer$) and it is assigned the CLMApp role for the FIMCertificateManagement database 5. At the CA, ensure that the FIM CM Policy module is configured with the thumbprint of the clmAgent certificate 6. At the CA, ensure that the smartcard user certificate template is available for enrollment 7.In the certificate templates console, ensure that the requesting user is assigned Read and Enroll permissions on the smart card user certificate template Any errors in these steps could lead to your error Brian
Free Windows Admin Tool Kit Click here and download it now
February 22nd, 2011 8:10pm

How does your environment look like? CA on Windows 2008 plattform? Do you use Data Collection Items in the FIM CM profile templates Do you have Auditing enabled for "Issue and manage certificate requests" on the CA? If yes, the error is thrown by a new feature in the Windows 2008 CA service. The W2k8 CA service has defined a maximum lenght for certificate requests - to avoid denial of service attacks. If the request package is larger than the maximum lenght a CA component responses with an error message that CLM interpretes as "The parameter is incorrect". This happens with more than one data collection item in a FIM CM profile template. See also here /Matthias
February 23rd, 2011 9:30am

thanks for the Help OLGN
Free Windows Admin Tool Kit Click here and download it now
March 17th, 2011 11:11am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics