Re: problem with CA

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Sam Salhi [MSFT] (samers_at_online.microsoft.com)
Date: 10/13/04 

Date: Tue, 12 Oct 2004 20:36:59 -0700

This is not a RADIUS/IAS related question, here are some hints to help you
Try to check the Certificate templates (from the CA run CERTTMPL.MSC) to see
if you have set specific ACL's on that computer to deny it access to
Computer template

You may want to explicitly add that computer with Enroll permission (you set
this in the security tab of the computer template)

Last, you may want to "Clone" the certificate template, and do the previous
2 checks to see if this is possible

HTH 

-- 
      =============================================
  This posting is provided "AS IS" with no warranties, and confers no 
rights.
      =============================================
"Mike" <no@spam.com> wrote in message 
news:O9Mj0JRhEHA.3076@tk2msftngp13.phx.gbl...
>I noticed that I have a event in the eventlog.
> EventID 13, source AutoEnrollment
> Automatic certificate enrollment for local system failed to enroll for one 
> Computer certificate (0x80070005).  Access is denied.
> I guess this can have something to do with it, but yet I don't know how to 
> solve it.
>
> thanks!
>
> "Mike" <no@spam.com> wrote in message 
> news:uyJIQYQhEHA.3612@TK2MSFTNGP12.phx.gbl...
>> Hi,
>> (I hope this question can be posted into this newsgroup)
>> I have installed a certification authority on our server (win2000) and 
>> created a certificate that should be exported.
>> This works great on all but one computer.
>> If I open the mmc and the certificate snap in for local account, under 
>> personal - all machines get their certificate, but on this computer it's 
>> empty.
>> If I right click - all tasks - request new certificate, go through the 
>> wizard and click finish I get an errorbox.
>> saying:
>> "The certificate request failed because of one of the following 
>> conditions:"
>> "- The certificate request was submitted to a Certificate Authority (CA) 
>> that was not started."
>> "- You do not have the permissions to request certificates from the 
>> available CAs."
>>
>> I have a laptop next to me and with that I can request with no problem so 
>> that mean that it's not the first issue, the CA is started.
>> So it must mean that I don't have permission, but who is it that doesn't 
>> have permission? I am domain admin, and I am logged in to the other 
>> computer where I can request certificates.
>> So there must some permission problem with this computer?
>> Where should I start looking, any ideas?
>>
>> thanks!
>>
>>
>
>

Relevant Pages

  • Re: Windows 2003 - Child domain cannot request certificate from root domain
    ... The main thing is that you have to modify the permissions on the certificate templates you wish to issue. ... After following the Certificate Request Wizard in the MMC Certificate ...
    (microsoft.public.windows.server.security)
  • Re: Web enrollment, only web server template
    ... The web page enrollment is run in the context of the user, not the computer, so you must be able to provide the subject name in the request ... You previously stated you have standard edition for your enteprise CA, so you cannot issue version 2 certificates. ... If you had an enterprise CA, then you could create a v2 certificate, and you do not have to add the template, it would be available under advanced requests ... > You must add the certificate templates using the Certification> Authority ...
    (microsoft.public.security)
  • Re: Using w2k3 IAS / wifi / PEAP / WPA with NT4 domain??
    ... open certificate server snap-in and make sure RAS and IAS ... I am still curious about not> having certificate templates. ...
    (microsoft.public.internet.radius)
  • Re: "No Certificate Templates Could Be Found" Error Message When User Requests Certificate from CA W
    ... Have you properly set permissions on the certificate templates (just ... and when they click on the link Create and submit a request to ...
    (microsoft.public.security)
  • Re: Certificate Server..
    ... > Then installed certificate server. ... > templates theres only 2000 certificate templates. ... Scientists were excited this week at having isolated a brief sound which occurred immediately before the Big Bang. ...
    (microsoft.public.windows.server.security)