Re: Forest, Domain, Certificate, CA, IAS/Radius, Issues

Hello Tony,

Thank you for your reply.

Have you removed the CA certificate of the previous subordinate CA (on
DomainB_DC1) on DC2 and DC3? Because the CA service has been reinstalled,
we need to remove the CA certificate and add the new one for the new CA
service.

To delete the previous CA's CA certificates from the problematic DC (DC2,
and DC3), please follow these steps on DC2 and DC3:

1) Click "Start", click "Run", type "MMC" (without the quotation marks),
and then click "OK".

2) Click the File menu, click "Add/Remove Snap-ins", and then click "Add".

3) Click "Certificates" and then click the "Add" button in the "Add
standalone" snap-in.

4) Click "Computer Account", click Next, ensure "Local computer" is
selected, and then click "Finished".

5) Expand "Trusted Root Certification Authorities" -> Certificates. Delete
the CA certificates of the previous CA, DomainB_DC1.

After that, please connect to http://DomainB_DC1/certsrv and re-add the new
CA certificate on each DC.

To do so, go to the problematic client computers and perform the following
steps:

1) Browse to:

http://DomainB_DC1/certsrv

2) Click "Download a CA certificate, certificate chain, or CRL".

3) Click the link of "To trust certificates issued from this certification
authority, install this CA certificate chain".

Please check if the problem can be resolved.

Thanks!

Regards,
Joe Wu
Microsoft Online Partner Support

======================================================
PLEASE NOTE: The partner managed newsgroups are provided to assist with
break/fix
issues and simple how to questions.

We also love to hear your product feedback!

Let us know what you think by posting
- from the web interface: Partner Feedback
- from your newsreader: microsoft.private.directaccess.partnerfeedback.
We look forward to hearing from you!
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================


.