Previous Next

• 09-04-2008, 4:21 AM

  ekennedy81 Joined on 09-04-2008, 4:11 AM Posts 2

  Cannot generate the CSR file in IIS. Reply Contact Hi, I am trying to generate a CSR file in order to process the certificate renewal, and install it on a Citrix Secure Gateway box. But each time I open IIS, open properties of the Default Web Site, choose Directory Security, and then try to open the Server Certificate option in the Secure Communications section of the tab, the whole IIS window and the Default Web Site Properties window both close without any error, or any logs being generated in the event viewer. If I try to open the View Certificate, or Edit options on the same Server Security tab, I can open these options without error. I have tried restarting IIS, I have rebooted the server in question, but I can still not access the Server Certificate option. Does anybody out there have any light they can shed on this situation, or has anyone seen behavious like this before? Thanks.

• 09-11-2008, 6:28 AM

  In reply to

  WenJun Zhang - MSFT Joined on 08-27-2008, 2:53 AM Posts 80

  Re: Cannot generate the CSR file in IIS. Reply Contact Please try re-registering certwiz.ocx, certmap.ocx and xenroll.dll and see if the problem still persists. Xenroll.dll is located in the \Winnt\System32 directory. Follow these steps to reregister Xenroll.dll: 1.  Open Windows Explorer, expand the Winnt directory, and then click the System32 directory.  2.  Click Start , click Run , and then type Regsvr32 in the text box.  3.  In Windows Explorer, locate Xenroll.dll in the \Winnt\System32 directory, and then drag Xenroll.dll into the text box that is described in step 2.  4.  Click OK . A message box states that the Xenroll.dll registration is successful.  If registering the Xenroll.dll file does not resolve this issue, register the following additional files by using the same steps: • \%systemroot%\system32\inetsrv\certmap.ocx  • \%systemroot%\system32\inetsrv\certwiz.ocx  Close the IIS Properties window, and then open the Web site properties. Verify that you can create a certificate request. MORE INFORMATION The Certwiz.ocx control wizard calls the Xenroll.dll dynamic-link library (DLL) when you click Server Certificate . WenJun Zhang - MSFT Sincerely Microsoft Online Community Support “Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

• 09-11-2008, 7:00 AM

  In reply to

  ekennedy81 Joined on 09-04-2008, 4:11 AM Posts 2	Re: Cannot generate the CSR file in IIS. Reply Contact  Hi WenJun,  I re-registered the xenroll.dll file and it allowed me access to the server certificate. Thanks very much for the answer.   How do I give you credit for supplying the right answer?   Thanks.