WS 2003 Vista certificate enrollment after 922706 hotfix
HelloI have a WS2003 machine sitting on a WS2008 domain running as a web server and CA. It happily acts as a trustpoint for the VPN etc and serves certificates to XP machines using the http://servername/certsrv website.I have not specifically activated any https server on the machine that i am aware ofor installed any SSL certificates for this purpose.I tried to get a vista machine to download a certificate and was directed to the hotfix KB922706. i installed this hotfix without any issues on the server.Now when i try to get a certificate from the server with the vista machine i navigate to http://servername/certsrv and once i am on the http://servername/certsrv/certrqma.asp page i get a webpage pop up "In order to complete certificate enrollment, the Web site for the CA must be configured to use HTTPS authentication"What do i have to do to enable this?I have seen some links describing the installation of an SSL certificate at http://msdn.microsoft.com/en-us/library/ms751408.aspxBut i am not sure if they are appropriate. I do notneed to send away any ceritifcates to an online certification authority as this is for a local intranet systemi have seen other comments suggesting to navigate to https://servername/certsrv this yields an "Internet Explorer cannot display the webpage" error. I am able to navigate to other internal https sites without any issues (eg firewall devices etc..)I appreciate any help you can provide in this matterdc
October 27th, 2009 1:17pm

here is good explanation of this process:http://www.zdnetasia.com/techguide/storage/0,39045058,62036934,00.htmonly make sure if your clients trust your SSL certificatehttp://www.sysadmins.lv
Free Windows Admin Tool Kit Click here and download it now
October 27th, 2009 2:00pm

Hi,thanks for your reply, this link seems more to do with using an online authority, i think i need to create a self signed certificate, i have got a link to the resource kit to use the SelfSSL tool. If i create this certificate and install it usingf the instructions in the link will the https server work and then should i be able toaccess the https://servename/certsrvwebpage?thanksdc
October 27th, 2009 3:49pm

okthe self SSLtool worked properly. i just had to mark my user certificate as read and enroll for all authenticated users to see it on the sitecheersdc
Free Windows Admin Tool Kit Click here and download it now
October 27th, 2009 5:44pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics