Hi,
I built a two-tier PKI based on this guide: http://social.technet.microsoft.com/wiki/contents/articles/15037.step-by-step-guide-two-tier-pki-hierarchy-deployment.aspx
I set "AlternateSignatureAlgorithm" to 0 on both the root and intermediate CA as I have XP and 2003 clients.
After the Intermediate CA installation, I have a lot of failed requests:
My current user is a member of the Enterprise Admins group and it seems like it's failing on getting the CA Exchange certificate. The command 'certutil -cainfo xchg' gives the following:
CertUtil: -CAInfo command FAILED: 0x80070057 (WIN32: 87)
CertUtil: The parameter is incorrect.
If I try to issue the failed request, I get 'The requested property value is empty 0x80094004'.
The command 'certutil -dump' gives the right information, the 'Flags' property is set to 13.
Is there anyone who can help me troubleshoot this?