Certificate Server

Not sure this is the right place to post this, but did not really find
anywhere else to post this question. We have an internal ca running and one
of our certificate servers is having trouble with the certsrv website. The
server is giving out certificates that are set to autoenroll so the
certificate services are working correctly. When we try to access the
http://servername/certsrv we get a 401.2 error and in the security log on the
server I get a event id 553 failure audit with request type of krb_ap_req
with the account I am using to authenicate to the site and then the caller
user name is network service. The network service account is what we are
using for the default app pool and when I change the account in the app pool
the caller user name changes in the failure audit.

Any help would be greatly appreciated

Richard Tracy
.

Relevant Pages

  • Re: IIS 6 Directory Services Mapping ACL Problems
    ... It would appear that you can not delegate Certificate based credentials. ... IIS does not have the user's password, so it can't just logon to the remote ... file server as the user directly. ... Lastly - if you want to see what account is being used to access the remote ...
    (microsoft.public.inetserver.iis.security)
  • Re: Encrypting the response
    ... The account ASP.NET normally runs under in Windows Server 2003 is indeed ... NETWORK SERVICE, but that's a built-in account, so you won't find it. ... > account WSE 2 is using to try to access the private key. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • IIS 6 Directory Services Mapping ACL Problems
    ... We are trying to configure certificate based logins using the ... When I authenticate on our web server with my certificate I my domain ... account username shows up in the web log. ... The files are stored on another server in the domain. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Certificate key access under Network Service in IIS 6
    ... Haven't done that because I've been remoted in to the customer's server. ... It is likely the private key file but might be a registry key as well. ... I can get the signing process to work if I have the IIS Application Pool configured to run under SYSTEM but running under the preferred NETWORK SERVICE account the private key access of the certificate fails. ...
    (microsoft.public.dotnet.security)
  • Certificate Server
    ... of our certificate servers is having trouble with the certsrv website. ... server I get a event id 553 failure audit with request type of krb_ap_req ... The network service account is what we are ...
    (microsoft.public.security)