| Author |
Message |
Kristoffer Nørkjær Randlø
Guest
|
 Posted:
Tue Oct 18, 2005 12:50 pm Post subject:
Windows Server 2003 Ent. Certificate Services Webenroll |
|
|
I have a Certificate Authority set up in a domain. (Enterprise Edition). In
my DMZ i have a CAproxy (webenrollment) set up. when i log in to the caproxy
with remote desktop and do a http://caproxy/certsrv web enrollmant i am able
to get a certificate. when i try to enroll from the same proxy, but from
another computer i get the following error :
Error
Your request failed. An error occurred while the server was processing your
request.
Contact your administrator for further assistance.
Request Mode:
newreq - New Request
Disposition:
(never set)
Disposition message:
(none)
Result:
Access is denied. 0x80070005 (WIN32: 5)
COM Error Info:
CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
LastStatus:
Access is denied. 0x80070005 (WIN32: 5)
Suggested Cause:
The Certification Authority Service has not been started.
This is driving me absolutely nuts.
i get nothing in the eventlog.
is there any way i can turn on advanced debugging? |
|
| Back to top |
|
 |
Kristoffer Nørkjær Randlø
Guest
|
| Posted:
Tue Oct 18, 2005 12:50 pm Post subject:
Re: Windows Server 2003 Ent. Certificate Services Webenroll |
|
|
OK, I have done some more testing and, it seams like when ever i use a
machine in the same domain as the CA servers i am able to get certificates.
however using a machine not in the same domain or in no domain i get the
stated error.
How can i work around this.?
"Kristoffer Nørkjær Randløv Jepsen" <kris.nrj@nospam-gmail.com> skrev i en
meddelelse news:%23HA8DG90FHA.2540@TK2MSFTNGP09.phx.gbl...
| Quote: | I have a Certificate Authority set up in a domain. (Enterprise Edition). In
my DMZ i have a CAproxy (webenrollment) set up. when i log in to the
caproxy with remote desktop and do a http://caproxy/certsrv web enrollmant
i am able to get a certificate. when i try to enroll from the same proxy,
but from another computer i get the following error :
Error
Your request failed. An error occurred while the server was processing
your request.
Contact your administrator for further assistance.
Request Mode:
newreq - New Request
Disposition:
(never set)
Disposition message:
(none)
Result:
Access is denied. 0x80070005 (WIN32: 5)
COM Error Info:
CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
LastStatus:
Access is denied. 0x80070005 (WIN32: 5)
Suggested Cause:
The Certification Authority Service has not been started.
This is driving me absolutely nuts.
i get nothing in the eventlog.
is there any way i can turn on advanced debugging?
|
|
|
| Back to top |
|
|
Kristoffer Nørkjær Randlø
Guest
|
| Posted:
Wed Oct 19, 2005 8:51 am Post subject:
Re: Windows Server 2003 Ent. Certificate Services Webenroll |
|
|
Is there no one who has somethng i can try?
"Kristoffer Nørkjær Randløv Jepsen" <kris.nrj@nospam-gmail.com> skrev i en
meddelelse news:OJIxb290FHA.2540@TK2MSFTNGP09.phx.gbl...
| Quote: | OK, I have done some more testing and, it seams like when ever i use a
machine in the same domain as the CA servers i am able to get
certificates. however using a machine not in the same domain or in no
domain i get the stated error.
How can i work around this.?
"Kristoffer Nørkjær Randløv Jepsen" <kris.nrj@nospam-gmail.com> skrev i en
meddelelse news:%23HA8DG90FHA.2540@TK2MSFTNGP09.phx.gbl...
I have a Certificate Authority set up in a domain. (Enterprise Edition).
In my DMZ i have a CAproxy (webenrollment) set up. when i log in to the
caproxy with remote desktop and do a http://caproxy/certsrv web enrollmant
i am able to get a certificate. when i try to enroll from the same proxy,
but from another computer i get the following error :
Error
Your request failed. An error occurred while the server was processing
your request.
Contact your administrator for further assistance.
Request Mode:
newreq - New Request
Disposition:
(never set)
Disposition message:
(none)
Result:
Access is denied. 0x80070005 (WIN32: 5)
COM Error Info:
CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
LastStatus:
Access is denied. 0x80070005 (WIN32: 5)
Suggested Cause:
The Certification Authority Service has not been started.
This is driving me absolutely nuts.
i get nothing in the eventlog.
is there any way i can turn on advanced debugging?
|
|
|
| Back to top |
|
|
Paul Adare
Guest
|
| Posted:
Wed Oct 19, 2005 12:50 pm Post subject:
Re: Windows Server 2003 Ent. Certificate Services Webenroll |
|
|
In article <OKd9xjI1FHA.2008@TK2MSFTNGP10.phx.gbl>, in the
microsoft.public.windows.server.security news group, Kristoffer Nørkjær
Randløv Jepsen <kris.nrj@nospam-gmail.com> says...
| Quote: | Is there no one who has somethng i can try?
|
Any errors in the event log on the CA itself?
You may need to open a support incident with Microsoft's support
services to get this resolved.
| Quote: |
"Kristoffer Nørkjær Randløv Jepsen" <kris.nrj@nospam-gmail.com> skrev i en
meddelelse news:OJIxb290FHA.2540@TK2MSFTNGP09.phx.gbl...
OK, I have done some more testing and, it seams like when ever i use a
machine in the same domain as the CA servers i am able to get
certificates. however using a machine not in the same domain or in no
domain i get the stated error.
How can i work around this.?
"Kristoffer Nørkjær Randløv Jepsen" <kris.nrj@nospam-gmail.com> skrev i en
meddelelse news:%23HA8DG90FHA.2540@TK2MSFTNGP09.phx.gbl...
I have a Certificate Authority set up in a domain. (Enterprise Edition).
In my DMZ i have a CAproxy (webenrollment) set up. when i log in to the
caproxy with remote desktop and do a http://caproxy/certsrv web enrollmant
i am able to get a certificate. when i try to enroll from the same proxy,
but from another computer i get the following error :
Error
Your request failed. An error occurred while the server was processing
your request.
Contact your administrator for further assistance.
Request Mode:
newreq - New Request
Disposition:
(never set)
Disposition message:
(none)
Result:
Access is denied. 0x80070005 (WIN32: 5)
COM Error Info:
CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
LastStatus:
Access is denied. 0x80070005 (WIN32: 5)
Suggested Cause:
The Certification Authority Service has not been started.
This is driving me absolutely nuts.
i get nothing in the eventlog.
is there any way i can turn on advanced debugging?
|
--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea |
|
| Back to top |
|
|
Kristoffer Nørkjær Randlø
Guest
|
| Posted:
Wed Oct 19, 2005 12:50 pm Post subject:
Re: Windows Server 2003 Ent. Certificate Services Webenroll |
|
|
Yeah, Nothing in the CA or CAproxy eventlog only the error on the enrollment
pages.
Im currently setting up a virtual test environment to test if i can get it
up on clean installations.
"Paul Adare" <padare@newsguy.com> skrev i en meddelelse
news:MPG.1dbfd6eee3720e32989ee5@msnews.microsoft.com...
| Quote: | In article <OKd9xjI1FHA.2008@TK2MSFTNGP10.phx.gbl>, in the
microsoft.public.windows.server.security news group, Kristoffer Nørkjær
Randløv Jepsen <kris.nrj@nospam-gmail.com> says...
Is there no one who has somethng i can try?
Any errors in the event log on the CA itself?
You may need to open a support incident with Microsoft's support
services to get this resolved.
"Kristoffer Nørkjær Randløv Jepsen" <kris.nrj@nospam-gmail.com> skrev i
en
meddelelse news:OJIxb290FHA.2540@TK2MSFTNGP09.phx.gbl...
OK, I have done some more testing and, it seams like when ever i use a
machine in the same domain as the CA servers i am able to get
certificates. however using a machine not in the same domain or in no
domain i get the stated error.
How can i work around this.?
"Kristoffer Nørkjær Randløv Jepsen" <kris.nrj@nospam-gmail.com> skrev i
en
meddelelse news:%23HA8DG90FHA.2540@TK2MSFTNGP09.phx.gbl...
I have a Certificate Authority set up in a domain. (Enterprise
Edition).
In my DMZ i have a CAproxy (webenrollment) set up. when i log in to the
caproxy with remote desktop and do a http://caproxy/certsrv web
enrollmant
i am able to get a certificate. when i try to enroll from the same
proxy,
but from another computer i get the following error :
Error
Your request failed. An error occurred while the server was processing
your request.
Contact your administrator for further assistance.
Request Mode:
newreq - New Request
Disposition:
(never set)
Disposition message:
(none)
Result:
Access is denied. 0x80070005 (WIN32: 5)
COM Error Info:
CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
LastStatus:
Access is denied. 0x80070005 (WIN32: 5)
Suggested Cause:
The Certification Authority Service has not been started.
This is driving me absolutely nuts.
i get nothing in the eventlog.
is there any way i can turn on advanced debugging?
--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea |
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in