0
votes
1answer
138 views

Unable to install Certificate Enrolment Policy Web Service

I'm running on Windows 2k8 Enterprise edition, and when adding the Active Directory Certificate Services, I don't see the option to add the Certificate Enrolment Policy Web service in the dialog box. ...
0
votes
1answer
128 views

Unable to install Network Deployment Enrollment Services (NDES)

I'm trying to install NDES on a Win2k8 R2 server, but I can't see the option. I've already added a user to IIS_IUSRS, and that user as sufficient priveleges since it is a part of the Administrator ...
0
votes
0answers
10 views

What is happening/where is the error when multiple accounts have the same certificate mapped?

In our environment if multiple accounts (such as a basic user and an administrative account) have the same certificate mapped this causes access issues with our web applications. By removing one of ...
1
vote
2answers
280 views

Remote Desktop Connection Issue

I have 2 HP Proliant servers with Windows Server 2008 R2 installed on them. They are headless servers, and I do not have a way of visually seeing the user interface of the servers. I do however know ...
1
vote
0answers
66 views

Automated way to get certificates from dead Windows install? [closed]

I have a windows hard drive that recently went bad. The drive functions enough for me to pull some data off, but I cannot boot it. I need to get some certificates off of it from IIS. There's a ...
0
votes
0answers
118 views

Why does IIS7 on one server work with my certificate while another has problems?

In the setup I describe, we have two servers, Alpha and Bravo. Alpha is a server that has been around for years. It is a Windows 2008 server running IIS7. In order to log in to any application on ...
0
votes
3answers
414 views

Install X509 certificate into Windows 2008 R2

I'm trying to install a certificate into my windows 2008 but I'm not able to do it right. I have a .crt file and I click to install from contextual menu. It succeed to import but if I browse the ...
0
votes
0answers
69 views

MMC Cert Manager Plug-in is making LDAP connection to external site, why?

I'm trying to figure out what is causing 5 of my servers to attempt to connect to an external LDAP server. I inherited these servers when another employee left the company. As far as I know these ...
3
votes
1answer
40 views

Certificate issue causing code to fail

We have some code that connects to a website to call a web service. When I run the code on our server under my account (local admin) the code runs fine. When I run the code under a different user the ...
3
votes
2answers
82 views

certificate creation on Windows Server 2008

On Windows Server 2008 using RD Gateway Manager it is possible to create a SSL self-signed certificate. Which other ways exist to create certificates on Windows Server 2008?
0
votes
1answer
1k views

Getting ASN1 bad tag error when trying to complete certificate request in IIS7

I have a multi-domain certificate I'm trying to install on IIS 7.0. When I use the IIS manager to complete certificate request, I get the error: There was an error while performing this operation. ...
4
votes
1answer
2k views

What causes automatic install of trusted root certificate authorities into local machine's certificate store?

I spend whole day by diagnosing issue with my test services using mutual HTTPS. Services are hosted in IIS 7 on a test server running Windows Server 2008 Enterprise edition. Suddenly few weeks ago ...
0
votes
1answer
926 views

How to set up certificate authentication for VPN access to TMG 2010

I found this article (link) on how to set up VPN access to TMG 2010. It's clearly written and easy to follow, however, there are some pre-requisites for this. As I am fairly new to Windows server ...
1
vote
0answers
743 views

EC2 Windows: Certificate for local system with Thumbprint … is about to expire or already expired

I regularly see this error in the Windows Error Log on one of my EC2 instances: Certificate for local system with Thumbprint aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa is about to ...
1
vote
1answer
374 views

Why do I get certificate error when connecting to “trusted PEAP server?”

I'm trying to connect Windows 7 machine to my wireless network secured with WPA2-Enterprise PEAP. PEAP uses server authentication so I have created root CA named FesbCA on my Windows server 2008 R2 ...
8
votes
3answers
4k views

Can Https work without a certificate?

Recently our infrastructure team told our development team that you do not need a certificate for https. They mentioned that the only benefit of buying a certificate was to give the consumer peace of ...
0
votes
1answer
434 views

SSTP SERVER without certificate check

Is it possible to make a SSTP server where clients don't need certificates? If I want to use linux or microtik routeros as a client, do I have to do something extra in the SSTP server (Windows Server ...
1
vote
1answer
322 views

Certificate issed to DC on every restart

I have installed 2 CA onto 2 Windows 2008R2 VM, one being an offline root CA and the other is intended to be the issuing CA. However I found that a DC (a 2008R2 VM) is requesting 2 certificates, ...
1
vote
0answers
338 views

Windows 2008 R2 Capi 2 errors

We have a couple of Windows 2008 SP2 servers running on a ESX 4.1 host. The problem is they have started to report are CAPI2 errors such as; Log Name: Microsoft-Windows-CAPI2/Operational ...
2
votes
1answer
2k views

Why can't I export a certificate that I imported as exportable?

On Windows 2008, I'm using OpenSSL to generate a self-signed certificate (the openssl.cfg file is empty): openssl.exe req -x509 -config openssl.cfg -days 10950 -subj ...
2
votes
1answer
514 views

What are the steps to create a local domain CA certificate for code signing (and export it to .pfx)?

I want to sign a .NET assembly with a code signing certificate from my local domain CA. I tried sending a certificate request and got back a signed certificate from my local domain CA in my local ...
1
vote
1answer
2k views

Missing Certificate template From certificate to issue

I have following problem: Environement: SERVER 2008 STANDARD EDITION ACTIVE DOMAIN SERVICIES INSTALLED ACTICE CERTIFICATE SERVICIES INSTALLED ENTERPRISE CA INSTALLED I create a duplicate of ...
0
votes
1answer
622 views

Authentication with USB tokens on IIS, Windows Server 2008

I only have a installed Windows Server 2008 with Active Directory Domain, Web Server (IIS) and a bunch of USB Tokens on the table. Which are the steps to install the necessary components and ...
0
votes
2answers
446 views

Valid certificate issued by certificate authority

Using the below configuration: internal Domain: company.corp Server 2008 DC and CA I've setup Radius/NPS for WPA2-Enterprise authentication, but the mobile clients are getting certificate warnings ...
12
votes
1answer
10k views

How to inspect remote SMTP server's TLS certificate?

We have an Exchange 2007 server running on Windows Server 2008. Our client uses another vendor's mail server. Their security policies require us to use enforced TLS. This was working fine until ...
4
votes
1answer
10k views

How can I generate a certificate request on Windows Server 2008 for SqlServer 2008 w/o IIS installed

I'm trying to generate a CSR for an SSL certificate to encrypt connections to my SqlServer 2008 instance located on a Windows Server 2008 server. Most of the documentation I've read mentions using the ...
3
votes
3answers
17k views

'Certificate types are not available' When creating computer certificate?

Environment Windows Server 2008 sp1 Xeon CPU E5430 @ 2.66 GHz 16.0 GB Ram 64-bit Operating System 1TB Disk Space Server Role: SQL Server Other Information: Joint to domain, Logged in user domain ...
16
votes
7answers
18k views

IIS7: can't set host name on site with SSL cert and port 443

Consider a Win 2008 SP2 machine with IIS7. The task is to apply a certificate and host name to the one and only Site on this machine. The site's host headers need to be abc.123.mysite.com The first ...
6
votes
1answer
1k views

Purpose behind subordinate Certificate Authorities

At my place of employment, we are setting up a PKI infrastructure using Microsoft products. We have a totally clean slate here and want to have a good start. We're wondering why anyone would set up ...
0
votes
1answer
122 views

web site certificate issue

I am working on IIS 7.0 on Windows Server 2008 Enterprise x64. I want to know if I apply for a certifcate from Verisign, is the certificate bind to domain name or bind to computer? Any comments to my ...
0
votes
1answer
289 views

windows server 2008 certificate authority - issued cert valid from field

When does new certificate's valid from field always date a few minutes in past?
0
votes
2answers
510 views

I'm Lost: I'd like to use client-certificates to authenticate users' access to our web server

(Windows Server 2008) We have a web server that we'd like to limit access to. I thought a good way to do this would be to issue certificates to ours users. Unfortunately, This IIS & Tutorial ...
0
votes
1answer
818 views

SSL Certificate Issue - “Data Transfer Interrupted”

I imported a PFX file for a dedicated SSL Certificate from 1and1 for a domain on my web server. When I visit the domain, I get the message "Data Transfer Interrupted" I need help debugging this. ...
1
vote
1answer
966 views

Auto Enroll all servers for RDP certificate

I am running Windows 2008, and have an Enterprise CA installed. How can I make all servers auto-enlist to get a certificate for RDP? I don't want to have to do this manually on each machine.
2
votes
2answers
9k views

change the expiration date on self-signed certificates?

I have a client that is using self-signed certificates (to sign InfoPath forms). The certificates are created using the certificate service built into Windows 2008. They said the certicates always ...