1
vote
1answer
59 views

Windows Server 2008 R2 CA not issuing more than 2 years

I have active directory environment in 2003 R2. I have installed 2008 R2 Enterprise Edition CA. Then I have created custom template from web server template and add expiry date as 15 years. my root ...
1
vote
0answers
25 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
1
vote
0answers
29 views

EFS file access problems

in my organization, i have a deadline to deploy EFS using AD CS, and i am working with a single windows server 2003 box, which is the Root CA, and is the same server responsible to certificate ...
0
votes
0answers
39 views

Auto-enrollment certificate without enroll permission

I am Domain Admin of a company. We implement Active Directory Certificate Services in our company for email signature and encryption. Because we have more than 1000 users in our company, we want to ...
1
vote
0answers
195 views

ADCS WebEnrollment : The context was acquired as silent

I have setup Active Directory Certificate Services with Web Enrollment and I have the following error when enrolling certificate on other computers that are in the same domain : Certificate ...
2
votes
1answer
76 views

How to issue a cert for web hosting using ad cert authority

I need to issue a certificate for SSL binding in IIS using Active Directory Certificate Authority. As far as I understand it should have Purpose=Auth Server and contain private key/be exportable. ...
1
vote
1answer
50 views

Anyone know of a way to find all certs that weren't auto-enrolled?

I'm in the process of moving an Active Directory Certificate Services role over to a new 2012 server. The new server will be issuing new certs and I need to find all certs that weren't handed out by ...
3
votes
1answer
777 views

AD CS: Certificate Template not available

In short, a Certificate Template I want to use is not available for enrollment. The template in question is a copy of the "RAS and IAS Server" template. What's frustrating is that I've gotten this ...
0
votes
1answer
320 views

Can't locate SBS 2011 Certification Authority Web interface

Certification Authority Installed Certification Authority Web Enrollment Installed Certification Enrollment Web Services Not Installed Certification Enrollment policy web service Not Installed ...
4
votes
1answer
937 views

CA and Primary Domain Controller on the same server

i am setting up a Microsoft AD to be my CA. After research it looks like i need to have a domain controller before i can issue certs thru the CA. Would it be possible to place both the CA and the DC ...
1
vote
1answer
187 views

Client side certificates in client browsers with unix server for management

We are currently running Unix dedicated servers for everything (Web cluster, database, FTP, batch, ...) except for a Microsoft Active Directory Certificate Services. The sole purpose of this Windows ...
13
votes
3answers
2k views

Windows 2008 R2 CA and auto-enrollment: how to get rid of >100,000 issued certificates?

The basic problem I'm having is that I have >100,000 useless machine certificates cluttering up my CA, and I'd like to delete them, without deleting all certs, or time jumping the server ahead, and ...
1
vote
1answer
444 views

Do I need to replace my Windows Server 2003 Certificate authority?

I had a windows 2003 domain controller fail. The power supply went and took averything with it. Luckily, I have 2 other domain controllers. The only sticking point is that the server that failed was ...
0
votes
1answer
40 views

CA is not listed on Autoenrollment dialogs

I've had for a long time a 2003 AD Root CA in the domain and Admins have been able to request certificates to this CA through IIS interface without the need to generate a request file using the Create ...
1
vote
1answer
548 views

Domain Environment + Certificate Authority + Server 2008 R2

I have recently been delegated the task to setup a CA in our domain environment and have a question on why Microsoft does somethings the way they do lol. I have been trying to read up on what the ...
2
votes
1answer
62 views

Server 2008DC Replication issues with 2003DC

Still have an ongoing replication issue on my network. Long story short: Existing 2003 Domain (2003 Level). Added a new 2008R2 server. Did the usual Adprep/forestprep steps as required. Transferred ...
0
votes
1answer
505 views

How do I create a certificate with HP Systems Management Homepage with Windows 2008 R2

I'd like to get a trusted, or even better a "green bar" certificate from my Windows 2008 R2 CA to work with my Insight manger home page of https://host:2381 I tried importing the file ...
1
vote
2answers
531 views

Are code signing certificates automatically trusted across the domain if the root CA is trusted?

We have a Microsoft enterprise certificate authority, and I would like to start issuing a few code signing certificates. But what I'm unsure of is this: since all our domain/forest machines trust the ...
0
votes
2answers
138 views

How can I make a private SSL certificate be trusted by end-users on two seperate ActiveDirectory domains

I have a web application that utilizes SSL. The website is not publicly facing, and is for private internal access only at our enterprise. For security reasons, we run two separate Active ...
2
votes
3answers
400 views

Run `certutil -DCInfo` on a different target domain

It seems that running certutil.exe -DCInfo Verify will check the certificates for all domain controllers in the domain of the logged-in user account. In our AD forest, we have a handful of domains. I ...
0
votes
1answer
228 views

Disaster Recovery with one 2008R2 DC and a 2003R2 DC

I am working out DR scenarios and one was making me scratch my head: Currently our domain has a 2008R2 DC and a 2003R2 DC. I know bringing restoring DCs can sometimes be harmful to an AD if others ...
1
vote
2answers
3k views

Domain Controller promotion and certificate autoenrollment

I have this AD domain where a Windows Server 2003 SP2 Enterprise Root Certification Authority is operational, and certificate autoenrollment is enabled both for users and computers; all fine and good, ...
6
votes
2answers
5k views

Adding new root/enterprise CA without disturbing existing one?

I am looking at installing a new AD-integrated enterprise certificate authority structure, but have discovered that somebody already has created a CA (mostly used for SSL on internal websites). I ...
1
vote
1answer
328 views

Do I need to take special care when decommissioning a certificate server in a windows domain?

I'm setting up a new Windows 2008 R2 server to take over from a older Windows 2003 box in a small windows domain. I discovered that the old server is running the only certificate service in the ...
1
vote
1answer
73 views

Migrating a CA between trusted forests

I know it is possible to migrate a CA between Domains within an Active Directory forest (as per http://technet.microsoft.com/en-us/library/cc742388(WS.10).aspx), but is it possible to migrate a CA ...
1
vote
1answer
1k views

Windows 2003 Domain - Certificate Authority - New Automatic Certificate Request

I have an issue with a certificate authority in a windows 2003 domain. We need one configured to allow ssl/tls encrypted traffic over LDAP so that our Application Gateway server is able to allow users ...
0
votes
2answers
896 views

Removing Cert Server from AD

My CA server crashed. It was used to deploy certs to messenger clients for live communication. I am no longer using live communication. I removed the server object from AD but my clients and servers ...