For one of my clients I am setting up certificate services for them. I have a standalone offline root certificate server and an enterprise
active directory integrated subordinate.
Within the Enterprise PKI MMC I am getting an error "unable to download" for both AIA location and CDP location.
On the root CA I am using the Extensions tab to enter the direct LDAP paths to both the AIA and CDP location within Active Directory. Using LDP I verify the information was in Active Directory and determined the path. But when I copy the paths within the "Enterprise PKI tool" I get the following:
ldap://CN=Orthodonticsolution Root Certificate Authority,CN=AIA,CN=Public Key Services,CN=Services,CN=Configuration,DC=orthodonticsolution,DC=local/
ldap://CN=RootCA,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=orthodonticsolution,DC=local/
The reason the object cannot be not found is because of the leading "/" at the end of the ldap path. I am not sure how that leading slash came about because it does not exist on the AIA or CDP on the Root CA server. So the question I have is how do I input the direct ldap path on the Root CA server? Or how do I get rid of the leading slash? Any
help is appreciated. Thanks in advance for all suggestions and help.
Joel |