RE: Certificate request failed. Keyset does not exist

Hi John,

Thanks for posting here.

From the description, I understand the issue is that the certificate
request failed on your

winxp client. If I am off base, please don't hesitate to let me know.

Please verify that the Certification Authority is started and that you have
sufficient

permissions to request a certificate.

You receive a "Failed to generate the certificate request" error message
when you try create

a certificate request in IIS

http://support.microsoft.com/kb/908572/en-us


more information:

Error message when a client computer requests a certificate from a computer
that is running

Windows Server 2003 with Service Pack 1: "The wizard cannot be started
because of one or

more of the following conditions"

http://support.microsoft.com/kb/927066/en-us

Error message when you request a certificate from a computer that is
running Windows Server

2003 with Service Pack 1: "The certificate request failed because of one of
the following

conditions?"

http://support.microsoft.com/kb/929494/en-us

Description of the changes to DCOM security settings after you install
Windows Server 2003

Service Pack 1

http://support.microsoft.com/kb/903220/en-us

Request a computer certificate for server authentication

http://technet2.microsoft.com/WindowsServer/en/library/f9871e14-e923-47d3-a7
ff-

0c1a6cfc1f4d1033.mspx?mfr=true


Please check the error information about certsvc in application log both on
client and

server.

I appreciate your time. I am happy to be of assistance and look forward to
your reply.

Have a nice day!

Best regards,

Jacky Luo (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
====================================================
PLEASE NOTE: The partner managed newsgroups are provided to
assist with break/fix issues and simple how to questions.
We also love to hear your product feedback! Let us know what you think by
posting

from the web interface: Partner Feedback
from your newsreader: microsoft.private.directaccess.partnerfeedback.

We look forward to hearing from you!
====================================================
When responding to posts, please "Reply to Group" via your newsreader
so that others may learn and benefit from this issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
====================================================

.

Relevant Pages

  • RE: Unable to unwrap a symmetric key using the private key of an X.509
    ... When I create my own certificate and install it in the stores, ... my client application that is consuming my WSE enabled webservice receives ... <request signatureOptions="IncludeAddressing, IncludeTimestamp, ... <response signatureOptions="IncludeAddressing, IncludeTimestamp, ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Unable to authenticate via kerberos to IIS site accepting clie
    ... the dialog for selecting a certificate, IE accesses the page with integrated ... authenticated user" have no relation to the size of the request. ... Client Certificates are negotiated before server even sees the data, ... and Kerberos protocol of Integrated Authentication can affect the size ...
    (microsoft.public.inetserver.iis.security)
  • Re: Windows 2003 + Certificate Store + AcquireCredentialsHandle + SEC_E_UNKNOWN_CREDENTIALS
    ... >The client sends a PKCS#10 request to the CA. ... >certificate, such as the subject name, any extensions, and the public key. ... the client, before the client sends the request to the CA. ...
    (microsoft.public.platformsdk.security)
  • Re: CERTCA Web Sote Broken!
    ... If you apply hotfix Q323172 to both your client and CA web site, ... > certificate on my IIS server and encountered an infinite loop of page ... Click advanced certificate request ... After you have completed filling in your personal data, ...
    (microsoft.public.win2000.security)
  • Re: Client Certificate not reaching server
    ... being sent in the actual request. ... I do have a private key installed. ... certificate is in the Local Computer/Personal store on the client machine. ...
    (microsoft.public.dotnet.security)