« Previous Next »

Thread: Help needed with Win2003 Web Site Certificates

Last post 09-06-2008 4:07 AM by Ian C. 2 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (3 items)

Sort Posts:

  • 09-02-2008, 3:53 AM

    • Ian C
    • Not Ranked
    • Joined on 09-02-2008, 3:46 AM
    • Posts 2

    Help needed with Win2003 Web Site Certificates

     Hi,

    Hope someone out there can help.

    I’m using:

    Win2003 Enterprise Ed, SP2.IIS 6.0.Certificate Server 2.0.

    IIS supports two Web Sites, the Default and one other, both with different IP addresses and DNS listings, and work fine.

    Default site has Domain Server Certificate installed and SSL works fine.Cert Server is installed on Default site.Cert Server shows 10 available Templates including Web Site Template.

    I want to use SSL on the second site and have followed instructions in KB articles 298805 & 299875 to implement SSL.

    CSR created OK, via IIS -> Directory Security -> Secure Communications -> Server Certificate Wizard.The problem begins with browsing to the Certificate Request processor (http://localhost/certsrv)Certificate Services page opens and the following actions are taken:Request Certificate -> Advanced Certificate Request -> Submit Certificate request by using a base-64-encoded CMC or PKCS#10 file etc. -> Pasted CSR text.

    Here’s the problem;

    Select Certificate Template shows only two available Templates; Basic EFS and User.

    Why is the Web Site template or any other templates shown to be available in Cert Server not listed here ???

    How do I install them or get the Cert request processor to recognise them ??

    Any help would be much appreciated.Ian

     

  • 09-05-2008, 6:41 AM In reply to

    Re: Help needed with Win2003 Web Site Certificates

    This usually caused by incorrect logon user. Please ensure anonymous access isn't enabled on the CertSrv virtual directory and Integrated or Basic auth is allowed. Then make sure you logon as Administrator to open the request page. Anonymous account doesn't have permission to issue a server cert, so the template will not be listed if you access the CA site anonymously.

    Default Permission Settings for an Enterprise Certificate Authority
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;239706

    WenJun Zhang - MSFT
    Sincerely
    Microsoft Online Community Support

    “Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
  • 09-06-2008, 4:07 AM In reply to

    • Ian C
    • Not Ranked
    • Joined on 09-02-2008, 3:46 AM
    • Posts 2

    Re: Help needed with Win2003 Web Site Certificates

    Thanks for that.

    I was logged onto the server as administrator, but not the domain, hence cert server was being accessed by a restricted access account.

    All OK now

    Regards

    Ian C

Page 1 of 1 (3 items)
Microsoft Communities