I stood up a Windows 2008 R2 Entr SP1 CA server for my multi domain forest. IIS and Certificates are not my area of expertise.
The forest structure is an empty root with Resource and User domains. The Servers are in the Resource Domain.
The system originally worked however it stopped working, not entirely sure when as I use this function very little. When I try to Request a Cert via the https://Servername.FQDN/certsrv page I get a 401 “Unauthorized: Access is denied due to invalid credentials”. There is nothing wrong with the credentials I’m offering, I’m using is a Domain Administrator account. Additionally the account I’m using is a member of the CA managers Global Group.
Additionally I have set the system via GPO to auto enroll certificate requests from the Forest computer systems, but I have to log into the WEB site and manually issue them.
I’ve spent most of the day going from one KB article to another and nothing seems to be working. When I enter in https://server.FQDN/Test/, I get an IIS 7 picture.
If I try to change the security settings on the Certsrv site in IIS manager, the options are grayed out.
At this point I'm at a loss as to what to try or how to get this thing fixed.
- Bryan
Arlington VA