The value in the "CSP" field appears as "Loading" when you use the Advanced...
To whom it may concern,We are getting this message 'The value in the "CSP" field appears as "Loading" ' when we are trying to get an ubuntu linux machine to enroll for a certificate and it will not let...
View ArticleAdd 2008 R2 Certificate Authority to 2008 Environment?
Hi,Apparently Microsoft Direct Access One Time Password (OTP) issuance requires the use of a Certificate Authority that runs 2008 R2 or above. The problem is that our Certificate Services environment...
View ArticleClik here to view.
External Site Certificates Issued By Internal Root CA?
So I've been noticing a kind of weird issue of late, not sure how long it's been going on. We currently have an Enterprise PKI environment with a an offline Root and Policy CA and an online Issuing....
View ArticleCertSvc is not starting due to database restore operation
Hi, Whenever I tried to start the certificate service I get the following error, Active Directory Certificate Services did not start: Unable to initialize the database connection for SubCA01....
View ArticleSecuring Windows Server 2012 using RETINA recommendations breaks SYSPREP
When locking down Windows Server 2012, some vulnerability scanners recommend to disable the Task Scheduler service. This should be done with GPO after the image is created. Applying the setting prior...
View ArticleDomain Admin doesn't have local Administrator privileges
This was all done using Azure VMs.machine: server-dc Setup Windows 2012 R2 as a domain control with user 'testadmin' Domain: DEV Added a user 'domainadmin' and made a Member of all the same groups as...
View ArticleCRL not publishing to web server in DMZ. The directory name is invalid....
We have a Windows 2008 Root CA and a Windows 2008 Subordinate CA. We have the CRL's published to a DMZ server using a script. This has been working fine for many months. Now suddenly the CRL publishing...
View ArticleAccount with admin privilges still prompted by UAC for admin credentials
I've just added two member servers running Windows Server 2012 R2 to my domain. I don't wish to use the domain administrator account itself to log into these two servers, but they should have...
View ArticleData loss prevention solution in windows server
I am wanting to implement a DLP solution on our network, I am looking for starting points for software.
View ArticleView the CRL version
Hi all,How to know the version/date of the CRL downloaded on the application servers?I would like to know if the servers dowload the latest CRL.Thanks in advance
View ArticleCA - no certificate templates could be found.
Dear All,I have a 2008 Domain Controller with the CA Server role installed with the issue that the Web-Enrolement procedure is not working proper. I can´t request any cert´s using the web-browser. Cert...
View ArticleNo Certificate Templates could be found
This seems to be a common problem, but without a common solution. I have stood up a Server 2008 R2 SP1 member server in my domain and installed the certificate services and web enrollment components....
View ArticleFrom time to time, I can't verify the expiration of my client certificate on...
I have a IIS web server and a CA(AD CS) server built on a 2008R2 virtual machine. I require a client certificate in order to access the web server. It works very well but FROM TIME TO TIME, a 403...
View ArticleAdvice on tidying up a PKI inf on domain
Background: RootCA setup (not by me) 5 years ago on 2003 server and a subordinate RootCA on 2008R2 server a year ago (on a DC). Required to retire the 2003 server (and conveniently its CA cert is about...
View ArticleWindows 2003 R2 certificate authority
Hello all,I am not sure whether this post has to be here or somewhere else. So, if the moderator consider it should be moved to another forum, is ok.So, here is my problem:--we got an old Windows 2003...
View ArticleRequest SAN Certificate from 2003 server to 2008 Internal CA
I'm trying to request a SAN certificate from a 2003 Server running Exchange 2007 to an internal CA running on Server 2008.Using the MMC, Certificates (Local Computer) I can see the existing self-signed...
View ArticleWhat caused the Windows 2008R2 Security event discarded
Dear Support team, I have a windows 2008 R2 server, The security events didn't recorded from last year. 1. The maximum log size set to 100 MB, But the log file is 300 MB. The retention was set to...
View ArticleAutomatic certificate enrollment for local system failed (0x800706ba) The RPC...
I have a lot of background on this question so bear with me please. :)I am tasked with getting our domain from 2003 to 2008 level. In order to do that I brought up a 2008 R2 server into the domain and...
View ArticleMS10-049 fails to install
Hi,Server fails to apply patch on a windows server 2008R2 64bit that has been running for quite a while. Have checked to see if previulys installed but it has not.Error message below says this update...
View ArticleKerberos Ticket - Can an expired ticket cause an account to be locked out?
Hi All, Would someone be able to say if the inability to Fetch a Kerberos Ticket can cause an account to be locked out. I'm getting the following message i my logsMay 2 18:39:03 208.86.142.142...
View Article