I am getting the following error when I have the setting for delegation "Trust this computer for delegation to specified services only" and have it set to "Use Kerberos Only" with having "Host" and "rpcss" for the
CA. I have full open ports for the TCP 135 and the higher random ports also open, and the connection from Web Enrollment server to the DC we have ports 440 and 636 opened. I am using the DefaultAppPool for my CertSrv applications in IIS and I am using "ApplicationPoolIdentity"
as Identity for that pool.
- Request Mode:
- newreq - New Request
- Dis
- (never set)
- Disposition message:
- (none)
- Result:
- The RPC server is unavailable. 0x800706ba (WIN32: 1722 RPC_S_SERVER_UNAVAILABLE)
- COM Error Info:
- CCertRequest::Submit: The RPC server is unavailable. 0x800706ba (WIN32: 1722 RPC_S_SERVER_UNAVAILABLE)
- LastStatus:
- The RPC server is unavailable. 0x800706ba (WIN32: 1722 RPC_S_SERVER_UNAVAILABLE)
- Suggested Cause:
- This error can occur if the Certification Authority Service has not been started
But when I change setting for delegation "Trust this computer for delegation to specified services only" and have it set to "Use any authentication protocol" with having "Host" and "rpcss" for the same CA I get this
error when just trying to access the certrqma.asp site.