0

I have an offline root CA and an enterprise issuing CA. I created a req from the issuing CA and issued a cert with it on the offline root CA. When I try to install the cert on the issuing CA with the Certification Authority snap in I get the following error:

Cannot verify certificate chain. Do you wish to ignore the error and continue? The signature of the certificate can not be verified. 0x80096004 (-214689244)

Any idea?

Improve this question
10
  • Is the root CA part of the CA pool on the intermediate CA system?
    – Hauke Laging
    Apr 26, 2020 at 14:51
  • Root CA is standalone 2008 Standard Server (Work-group) and not part of CA Pool .
    – Peter
    Apr 26, 2020 at 15:17
  • If it is not part of the CA pool, how should the signature be verified? So add it to the pool.
    – Hauke Laging
    Apr 26, 2020 at 15:18
  • How can I do that?
    – Peter
    Apr 26, 2020 at 15:36
  • I have no idea. You should have maked this a Windows question.
    – Hauke Laging
    Apr 26, 2020 at 15:48

1 Answer 1

Reset to default
1

It looks like you didn't install the root certificate in the servers 'trusted root certification Authorities' store. When you try to import the signed certificate - it cannot verify the chain as trusted - and the import fails.

Open MMC - Add remove Snnapin - Certificates - Local Machine, and import the root certificate into the 'trusted root certification Authorities' store.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .