Migrating Standalone CA to Win2003

C

C.Dimitrov

Hi,

We have installed Standalone CA on Windows 2000 Adv Srv SP3
After we install Windows 2003 Standalone CA, we shut
certsrv down and move the CAs database from 2000 to 2003.
After starting 2003 CA, everthing was fine, we had all the
keys safe and working. After 2 weeks workin correctly it
start saying CA is going offline and can not serve
requests, we found we have shutted down the 2000 Adv
Server from the network. Then I saw in the EventLog it is
complaining about the CRL location, by default it was
file:// I added all possible LDAP:// and HTTP:// restarted
it. Renew the CAs certificate changing the CRL now on the
current server, and W2K Professional was able to find the
trust now. But we got this when trying to enroll a
certificate from the web or by clicking on Download CA
Certificate.

Contact your administrator for further assistance.
Failed to create 'CertificateAuthority.Request' object.

By logging with the Domain\Domain Admin account for this
domain I was able locally to request a certificate.All
other accounts logged in or browse on the web to use the
Web Enrollment funcitons gives above error.
Any clue what wrong I did and how to correct this?

Regards,
Constantin
 
V

Vishal Agarwal[MSFT]

Can you make sure that "Enable Session State" is enabled for CertSrv web
site in IIS?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top