RE: Wireless connection problem from XP Pro SP2 to SBS 2003

Great thanks for the link. I went to follow those instructions but it seems
the screen I'm seeing under advanced request is a little different than what
it seems to describe.

6. Provide identifying information as required.
- I'm not asked to provide any identifying information. I've seen
screenshots
of this screen where you fill out server info and I don't have that.

8. In Type of Certificate needed, click Server Authentication Certificate.
- I also do not have this option. The closest thing I have is
Certificate Template.
Under Template I only have the following options:

Administrator
Basic EFS
EFS Recovery Agent
User
Subordinate Certification Authority
Web Server

By choosing one of the last 2 options it gives me an ID info for offline
template although I'm still not given a Server Authentication Certificate
option.

Next is Key Options:

Create New or Use Existing and directly under that is CSP drop down:

MS RSA SChannel Cryptographic Provider
MS DH SChannel Cryptographic Provider

Key Usage is Exchange and appears to be the only option (which I want anyhow)
and then just the Size and storing options.

Additional Options are format of CMC or PKCS10
Hash SHA-1 or MD5
An attributes box and a Friendly Name

I guess I'm just lost at where to find the correct cert type as it seems I'm
looking at a different screen where some options aren't available, I am
logged in as the admin.

Apologies for my lack of knowledge but I sure do appreciate all the help!










"Matabra" wrote

Hi,

No a user certificate isnt quite what you need.

Follow the first set of instructions here

http://technet2.microsoft.com/windowsserver/en/library/f9871e14-e923-47d3-a7ff-0c1a6cfc1f4d1033.mspx?mfr=true

When you have requested the certificate you will need to go to the
certificate authority mmc on the server to approve it(Control panel --> Admin
tools--> Certificate authority --> Pending Certificates--> Right Click
approve). At that point return to the website on the client and it should
install ok.

Regards

Matt

"Cuervolush" wrote:

Ok. I'm able to get to the /certsrv. I go to request a certificate. It gives
me the option to request a User certificate, not a computer authentation
certificate. There is a submit request for advanced cert, but those options
are over my head.

I went ahead and requested a User cert, which installed fine but didn't
affect the problem. Do I need to log out for it to take effect or is that the
wrong cert all together?

"Matabra" wrote:

Ok, that sounds strange,

Try manually requesting a computer cetificate for this machine. go to
Http://*Servername*/certsrv and request a computer authentication
certificate.

Regards,

Matt

"Cuervolush" wrote:

Thanks for the reply Matt.

This computer is able to log on to the domain when wired. Also there are
other PC's in the office that can currently connect wirelessly as well, so I
dont suspect the service has stopped.

This computer can connect to other wireless networks without problems. Its
definetly not getting the cert for this network but only when trying to
connect via wireless. I'm relatively unfamiliar with the CA thing, so bear
with me.


"Matabra" wrote:

Hi,

Can you try disjoing the workstation from the domain, running the connect
computer wizard with it wired into the network and logging on. It sounds like
it needs a cert to connect ot the wireless and obviously cant get one when
its not connected.

Cheers

Matt

"Cuervolush" wrote:

Our office is running SBS2003 and we recently had to rebuild a
workstation. After the rebuild, I can no longer connect wirelessly to
the server. In Event Viewer I get the following:

Autoenrollment | Event 13

Automatic Certificate Enrollment for local system failed to enroll
for one Computer certificate. (0x800706ba). The RPC Server is
unavailable.

The wireless connection continuously tries to log in but comes back with
status: Authentication Failed.

I've searched a bunch of places with this error but haven't been able
to find an identical issue with a solution.

Unfortunately I did not set this server up, and have somewhat limited
knowledge on the server side of things but know enough to be
dangerous. Any help would be much appreciated and I would be happy to
provide any more information that would help in solving this problem.

Thanks

.

Relevant Pages

  • Re: Cannot request certificate on client computer
    ... re-connect both computer and user account on the server. ... PC and the certificate request now works. ... (I'd check both the server and the client PC). ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot request certificate on client computer
    ... re-connect both computer and user account on the server. ... one PC and the certificate request now works. ... (I'd check both the server and the client PC). ...
    (microsoft.public.windows.server.sbs)
  • Re: Generate SSL certificate request from ISA server
    ... when you receive the certificate from the authority, install it on the ISA ... Server instead of the web server. ... > request to send to them, which doesn't appear to be possible directly from ...
    (microsoft.public.isa.configuration)
  • Re: Cannot request computer certificate.
    ... I did a cerutil -ping from the server again and now it is working: ... >>whole problem since you can not request a certificate while logged onto ... >> I would verify that the certificate services service is running and set ... >>> The redir is bound to 1 NetBt transport. ...
    (microsoft.public.windows.server.security)
  • RPC over HTTP, Microsoft solution
    ... Exchange Server 2003 RPC over HTTP Deployment Scenarios ... Place a check in the box next to 'Certificate Services' and click 'Yes' ...
    (microsoft.public.exchange.setup)