Migrating Standalone CA to Win2003

  • Thread starter Thread starter C.Dimitrov
  • Start date Start date
C

C.Dimitrov

Hi,

We have installed Standalone CA on Windows 2000 Adv Srv SP3
After we install Windows 2003 Standalone CA, we shut
certsrv down and move the CAs database from 2000 to 2003.
After starting 2003 CA, everthing was fine, we had all the
keys safe and working. After 2 weeks workin correctly it
start saying CA is going offline and can not serve
requests, we found we have shutted down the 2000 Adv
Server from the network. Then I saw in the EventLog it is
complaining about the CRL location, by default it was
file:// I added all possible LDAP:// and HTTP:// restarted
it. Renew the CAs certificate changing the CRL now on the
current server, and W2K Professional was able to find the
trust now. But we got this when trying to enroll a
certificate from the web or by clicking on Download CA
Certificate.

Contact your administrator for further assistance.
Failed to create 'CertificateAuthority.Request' object.

By logging with the Domain\Domain Admin account for this
domain I was able locally to request a certificate.All
other accounts logged in or browse on the web to use the
Web Enrollment funcitons gives above error.
Any clue what wrong I did and how to correct this?

Regards,
Constantin
 
Can you make sure that "Enable Session State" is enabled for CertSrv web
site in IIS?
 
Back
Top