|
Question : How to download computer certificate from certificate authority
|
|
I am trying to request a computer certificate via IE (https://computer/certsrv). In the certificate templates drop down box of the advanced certificate request, it only has administrator, user, EFS, Web server, and a few others, but no domain controller, or computer certificate to request. On the page before that it says the it's up to the policy of the CA to determine the types of certificates you can download. How do you configure this to allow the domain controller/computer certificates to be requested?
|
|
Answer : How to download computer certificate from certificate authority
|
|
I do not think that DC certificates cannot be requested because of security issues. You may want to check if the permissions are set correctly so that you and the DCs are allowed to enroll the certificate.
Also, check if the DCs already have a DC certificate using the mmc (according to the previously described "option 1").
BTW: What OS version do your DCs run? W2K3 SP1? If yes, you wanna check this: http://support.microsoft.com/kb/889101/en-us
Search for "certutil setreg SetupStatus SETUP_DCOM_SECURITY_UPDATED_FLAG"
ATB Markus
|
|
|
|