FIM CM RPC error when executing SmartCard certificate request
When I try and complete a SmartCard request I get the RPC server unavailable error. I have gone through all the documents and ensured that delegation is set correctly. When I check the CA server I see that I get NT AUTHORITY\ANONYMOUS LOGON instead of the clmWebpool account. I have seen the prvious entry which the gent replied by stating he'd fixed it and it was Kerberos. Anybody got any ideas why this is happening :(
July 14th, 2010 5:27pm

Are you sure you have added the site to the "Local Intranet zone" in IE?Christian Skoglund
Free Windows Admin Tool Kit Click here and download it now
July 16th, 2010 10:12am

Hi I've experimented exactly the same problem but I had installed FIM CM on a 2008 R2 server. I've reinstalled on a 2008 and it works perfect... Regards Anthony
July 27th, 2010 6:06pm

It was found that this was down to the Kerberos settings: If you follow the FIM 2010 CM installation instructions then you are requested to do the following: 1) CLMWebPool account - Kerberos delegated to the HOST service for <CA Server Name> 2) FIM Server Name - Kerberos delegated to the RPCSS service for <CA Server Name> If the above was done on a complete 2008R2 environment then the above worked. I was getting the issue when FIM was a 2008R2 server and the DC's were 2003 or 2008. In the above case I had to resume to allow Kerberos to All services. I do have a case open for this with MS. When I get an answer I'll post the response.
Free Windows Admin Tool Kit Click here and download it now
July 29th, 2010 9:34am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics