Microsoft Certificate Services

[Guest]

Using Vista RC1, I'm testing requesting a certificate using Microsoft
Certificate Services. Going to my cert server,
http://server/certsrv/certrqma.asp, I get this error:

You need to install the following CSPs before the enrollment, Microsoft
Enhanced Cryptographic Provider v1.0, and Microsoft Base Cryptographic
Provider 1.0.

Any ideas of where I can get this for Vista? I don't see anything in Add
Features in Programs.

Thanks!
jt

 

[Guest]

Please see this.
http://support.microsoft.com/kb/922706/en-us

 

[Guest]

The Certificate request method has changed in Vista. You will not be able to
request a certificate with a vista client from a 2003 CA server. Please see

http://support.microsoft.com/kb/922706/en-us

for more details and how to work around this issue.

 

[Guest]

Thank you.

Microsoft's decision to deprecate xenroll is going to have a very large
negative impact on my support team until Longhorn server is out...

 

[Guest]

Well there ARE other ways to distribute certificates. As the article implies,
you CAN modify the web to support User certificate for both Vista and XP, and
a fix will come in 2003 SP2 as far as i know. The problem seems to be with
computer certificates and "enroll as" features. But once again i belive you
could use a different method for getting a computer certificate to your
machines besides the web. We use a DLL for our MS VPN clients so they
autoenroll when connecting with PPTP. The client then switches the client to
L2TP and PRESTO! ;-)

It works quite well actually. Haven't tried that function on Vista, but it
could work.