Issuing a certificate

16 May 2006 12:51 PM

Zart the Artist

I have set up a Standalone CA on a DC with W2k3 (test lab)
I have created a new certificate that is pending autorization from a CA.
I am trying to use this pending request with my CA and I am having
difficulty with this process.
I have read the doco and have learned that a web interface on my CA will
help process this key.
I cannot get to this interface on my DC via http://ca/certsrv.
Can someone help out and possilbly give me some direction in this process.

Thanks in Advance

16 May 2006 3:46 PM

Miha Pihler [MVP]

Hi,

If you have created certificate request and is now pending -- you (CA
administrator) have to use Certificate Authority MMC to issue (approve) the
certificate on the server. You can't do this on web interface. Once the
certificate is issued in MMC you can go back to the web interface and
download and install the certificate -- but you have to do this on computer
where you made the certificate request.

Note: for security reasons -- you should not install CA server on domain
controller.

--
Mike
Microsoft MVP - Windows Security

Show quoteHide quote

"Zart the Artist" <ZarttheArt***@discussions.microsoft.com> wrote in message
news:FAA9F433-7034-46CF-95A0-CC3A6FF26FCE@microsoft.com...
>I have set up a Standalone CA on a DC with W2k3 (test lab)
> I have created a new certificate that is pending autorization from a CA.
> I am trying to use this pending request with my CA and I am having
> difficulty with this process.
> I have read the doco and have learned that a web interface on my CA will
> help process this key.
> I cannot get to this interface on my DC via http://ca/certsrv.
> Can someone help out and possilbly give me some direction in this process.
>
> Thanks in Advance
>