Cert Server Denying Certs requests - Event ID 21: The certificate is revoked

[seb]

I'm trying to get a new certificate to my router. I revoked the old one and
now I
wanted to get a new one. Each time I go and ask for one I get the Following
on the CA Server (on Windows2000):

Event Type: Error

Event Source: CertSvc
Event Category: None
Event ID: 21
Certificate Services could not process request XX due to an error: The
certificate is revoked.

Anyone know how to solve or workaround this?

Thanks

Seb

 

[Steven L Umbach]

How are you trying to request it? Can the CA issue any computer certificates? Since
you revoked the old one make sure your request is for "new keys" and not existing key
set. --- Steve

 

[Seb]

Thank you for response Steve.
I'm requesting new certificate using mscep.
I'm generating new keys set on router side, getting CA certificate,
authenticating using key obtained by mscep web page, and trying to enroll.
At end on router side I receive message that enrollment was rejected by CA,
and on server side logs message about error in processing.
Seb

 

[Steven L Umbach]

Ok. I can't be of much more help as I have never used mscep to request a cetificate
for a router. The revoked certificate error is puzzling in that a revoked certificate
is a problem if a revoked certiticate is being used for authentication. You are
requesting a new certificate. Unless your old certificate is being used for
authentication in the process somehow. -- Steve

 

[Seb]

Oh, one more thing:
I was able to enroll for certificates for this device few times, things
changed when I enforced publish new CRL. Seems CA wasn't checking CRL for
revoked certificates, when old CRL was valid.
Is any way to edit or clear revoked certificates database?
Seb

 

[seb]

It's working again. Not sure what exactly help, but had to turn off all
servers, including domain controllers, for power maintenance and after that
I was able to get certifcates again.
regards
Seb

 

[Steven L Umbach]

Weird? Something was refreshed or cache cleared with shutting down
everything. Glad you got your certificate though. --- Steve