Certificate Service Migration
Hi,We are Using Windows 2003 as Sub-CA and we are planning to migrate the same to new Windows 2008 Server. The Windows 2003 CA is using SHA1 as Hashing algorithm but in Windows 2008 I want to use SHA2...
View ArticleClik here to view.
PKI Enrollment Failed Request ASN1 Corrupted Data / ASN1 Unexpected end of data
I have just 1 user that is not able to enroll for a certificate. The Failed requests logs shows two different errors:ASN1 unexpected end of data 0x80093102 (ASN: 258)ASN1 corrupted data 0x80093103...
View ArticleAutoenrollment for User Certificates - Not showing in Personal store?
We have one Win 2008 R2 Enterprise CA. All Windows 7 clients. The CA was setup before I started. The GPO settings for Autoenrollment were already set up for both Computers and Users. The company...
View ArticleProblem issuing certificates with SBS 2003
Hello, first off, this is a legacy machine and will be phased out in the coming months. In the mean time, I want to do some testing with email encryption. I remember in the past that I was able to go...
View ArticleEvent ID 36887, Schannel 45
Hi,I've been noticing the following in the Event Log:Event 36887, SchannelThe following fatal alert was received: 45 Log Name - SystemSource - SchannelEvent ID - 36887Level - ErrorUser - SystemOpCode:...
View ArticleSSL/TLS connection issue
Hello,I had windows 2003 certficate authority and ssl deployment were fine. Now with 2008 Certficate authrity i am having a issue.One of the SSL website is not working when browsing from windows 2003...
View ArticleHow can I set a specific user log on neme to a specific machine
Greeting,I have a question : How can I set a specific user log on name to a specific machine.e.g. Only User.A can log on to PC.A and the other can not.Base On :Windows Server 2003Active Directory...
View ArticleClik here to view.
ADFS server can't see certificate
Hi All,I have copied a certificate (web server) on my Enterprise Root CA and given an account full control on this certificate. I login with this (domain) account to my ADFS server, but when I try to...
View ArticleCertification Authority
We installed the Certification Authority service on a 2008 server. How do we issue a certificate to a user to allow them to digitally sign Excel and Word documents? When I try to sign a document...
View ArticleCan a user certificate be setup to auto renew but not auto enroll?
We currently do no use auto enrollment or auto renewal for user certificates. We would like to change to have the user certificates to auto renew but we do not want to enable auto enroll. We want to...
View ArticleWindows 2008 R2 >> Windows 7 Autoenrollment: Works only manually
Hello everybody!We're having issue with configuring autoenrollment for Windows 7. Meanwhile, Windows XP autoenrolls successfully.What had been done:1) Configured an Enterprise CA with v2 certificate...
View ArticleCRL Check for SSTP failing (0x80092013)
I am attempting to setup SSTP. Here is the environment.Cert. Authority - Server 2003R2 - residing on the Exchange Server Domain controllers are Server 2003R2 as wellVPN is Server 2012VPN client is...
View ArticleMy home network has been hijacked by 169.254.18.61 and I need help...
My event logs show that it has rewritten policy and has taken my ip address. I have blocked and blocked and blocked and this morning at 4am, while I was working, I found that he had opened a guest...
View ArticleRant about Local Administrator Password management
I have been working on Windows NT systems since NT 3.51 (Close to 18 years). For the entire time I have worked on Windows NT systems we have had a problem managing local administrator accounts. They...
View ArticleStop Windows Firewall on Windows 2003 R2 : impacts ?
Hello, I would like to stop the Windows Firewall on my Windows 2003 R2 servers. I would like to knows the impacts of the change ? I already read that Windows Event Collector must be stopped... Regards,
View Articlethe affects of removing a certficate template from a Certificate Authority
I have inherited what I am beginning to believe is a poorly designed PKI Infrastructure. I have 1 root CA and 2 Issuing CAs all 2008 R2. My root certificate authority is expiring in about 2 months so I...
View Article401 - Unauthorized: Access is denied due to invalid credentials
After installing MSCEP, enter http://Server2008/certsrv/mscep_admin in the browser.Enter correct user name and password in pop-up box. Windows 2008 keeps rejecting the correct user name and password....
View ArticleAccess is Denied error coming while renewing Issuing CA Certificate
I am having a three tier CA environment (Root, Subordinate and Issuing CA). I was to renew the subordinate and issuing CA certificates, as they were near to expiration date. I did the Subordinate...
View Article529 event ID in Security audit failure
Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 529 Date: 1/20/2014 Time: 8:20:50 AM User: NT AUTHORITY\SYSTEM Computer: Server1 Description: Logon Failure:...
View Article