Re: Cannot request certificate on client computer

The certificate does not appear on the client PC trusted root...
certificates. It does appear on the server trusted root... certificates

The client name is fully qualified.

Any thoughts?


"Dave Nickason [SBS MVP]" <gwdibble@xxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:%23FVGSUfWHHA.4404@xxxxxxxxxxxxxxxxxxxxxxx
When you look on the client PC under Certificates (Local Computer) ->
Trusted Root Certification Authorities -> Certificates, do you see one
that uses the name you gave the CA when you installed it on page 376?
Does the client PC have the proper DNS suffix as described on the bottom
of page 379 (computername.domainname.local)?



"John Lenz" <lenz4@xxxxxxxxxxxxxx> wrote in message
news:u6anA2eWHHA.896@xxxxxxxxxxxxxxxxxxxxxxx
I am following MS book on SBS 2003 R2 administrators companion page 378,
Requesting computer and user certificates.

I installed CA on server. Client is correctly attached to domain as
domain admin.

I launch MMC on client computer and add certificates (local computer) and
certificates current user.

When I right-click personal on certificates (local computer) and request
a certificate, I get error panel:

The wizard cannot be started because...
-There are no trusted certificate authorities available
- You do not have permissions to request certificates from available
CAs
- The available CAs issue certificates for which you do not have
permissions


When I created the local certificate on the server machine, the wizard
went through just fine.

Where is the hang-up?





.

Relevant Pages

  • Re: Secure VPN access
    ... with it's security option for the client. ... After getting the VPN connection I check the Ip settings and found the ... point to the head ISP's DNS server. ... > Computer certificates for L2TP/IPSec VPN connections ...
    (microsoft.public.windows.server.sbs)
  • Re: IIS website - only allow users with client cert from our CA. P
    ... Rootyou wish to permit certificates issued from for access to your site. ... our CA's client cert? ... I only have a server certificate from our CA ...
    (microsoft.public.inetserver.iis.security)
  • RE: Certificate based website problem
    ... Open Internet Explorer on the CLIENT and go to Tools - ... Click the Certificates button. ... On the SERVER, go to Start -> Run and type mmc ... You say you have three secure web sites. ...
    (microsoft.public.inetserver.iis.security)
  • Re: security header is not present in the incoming message
    ... One certificate "Client Private.pfx" to Certificates - Current User, Personal, Certificates. ... One certificate "Server Private.pfx" to Certificates - Current User, Other People, Certificates and the third one "Server Public.cer" to Certificates, Personal, Certificates. ... And this goes for services run in IIS och in ASP.NET Development Server. ...
    (microsoft.public.dotnet.security)
  • Re: SBS VPN Strengthening
    ... I definitely agree that Windows Server comes with all the tools you need to ... Also see Network Access Quarantine Control, ... will require a driver or other software on the client PC. ... Can we have IPSEC VPN possibly with Certificates for authentication ...
    (microsoft.public.windows.server.sbs)