Announcement

Collapse
No announcement yet.

Windows 2003 CA web enrollment question

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Windows 2003 CA web enrollment question

    I have setup a CA on a windows 2003 R2 DC. I can easily create certificates
    for IIS, but now I need to create a certificate for an Apache server. Via
    the CA mmc I configured that Web server templates can be issued, but when I
    use the Web Enrollment (e.g. http://server/Certsrv/) I can only select
    between Basic EFS or User certificates not Web Server certificates ? Where
    can I configure the web enrollment to issue Web server certificates ?

    Thank you
    Markus

    BTW I know it is possible as I have done this before, but I don't remember how.
    Last edited by huaraz; 25th May 2008, 13:36. Reason: Add additional comment

  • #2
    Re: Windows 2003 CA web enrollment question

    hi Hauraz,

    What you need to do is select the "Advanced certificate request" option, then choose either "Create and submit" or "submit using base-64-encoded cmc file".

    Make sure you use the "Web Server" template.

    Regards

    Tjoppie

    Comment


    • #3
      Re: Windows 2003 CA web enrollment question

      Originally posted by tjoppie View Post
      hi Hauraz,

      What you need to do is select the "Advanced certificate request" option, then choose either "Create and submit" or "submit using base-64-encoded cmc file".

      Make sure you use the "Web Server" template.

      Regards

      Tjoppie
      I did that, but struggle with "Make sure you use the "Web Server" template" as I have only User and Basic EFS in the list of possible templates.

      Thank you
      Markus

      Comment


      • #4
        Re: Windows 2003 CA web enrollment question

        hmmm... is your CA an enterprise ca? Only thing I can think of is that the CA is not fully authoritive for the domain...

        Comment


        • #5
          Re: Windows 2003 CA web enrollment question

          Originally posted by tjoppie View Post
          hmmm... is your CA an enterprise ca? Only thing I can think of is that the CA is not fully authoritive for the domain...
          Yes it is an Enterprise CA. From your response I interpret that I didn't miss a property, registry, etc .. setting

          I will try to remove and reinstall.

          Thank you
          Markus

          Comment


          • #6
            Re: Windows 2003 CA web enrollment question

            I think I found my problem. The user I used was an Administrator of the windows 2003 server but not a Domain Admin. It seems to create web server certificates the requestor needs to be a domain admin.

            Thank you
            Markus

            Comment

            Working...
            X