Web Enrollment pages on another computer

  • Thread starter Thread starter Mariano
  • Start date Start date
M

Mariano

Configuration
-CA (enterprise CA) is installed on a pc (PC1) with Windows Server 2003
Enterprise Edition (this computer is Domain Controller);
-Web Enrollment Pages are installed on a host computer (PC2) member of
domain;

When I launch web enrollment pages from PC2 (http://localhost/certsrv) all
works fine!
when I launch web enrollment pages from PC3 (pc3 is not member of the
domain) authenticating me with a domain account, I can navigate web pages
but when I request a certificate the following error occurs:


Your request failed. An error occurred while the server was processing your
request.

Contact your administrator for further assistance.

Request Mode:
newreq - New Request
Disposition:
(never set)
Disposition message:
(none)
Result:
Access is denied. 0x80070005 (WIN32: 5)
COM Error Info:
CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
LastStatus:
The operation completed successfully. 0x0 (WIN32: 0)
Suggested Cause:
The Certification Authority Service has not been started.


In event viewer (system) of PC2 there is:

DCOM got error "General access denied error " from the computer
computername.domainname when attempting to activate the server:
{D99E6E74-FC88-11D0-B498-00A0C90312F3}


Help me.
Thanks.

Mariano.
 
is the machine account hosting the web pages joined to the domain (AD) and
trusted for delegation?
 
Yes

David Cross said:
is the machine account hosting the web pages joined to the domain (AD) and
trusted for delegation?

--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

Mariano said:
Configuration
-CA (enterprise CA) is installed on a pc (PC1) with Windows Server 2003
Enterprise Edition (this computer is Domain Controller);
-Web Enrollment Pages are installed on a host computer (PC2) member of
domain;

When I launch web enrollment pages from PC2 (http://localhost/certsrv) all
works fine!
when I launch web enrollment pages from PC3 (pc3 is not member of the
domain) authenticating me with a domain account, I can navigate web pages
but when I request a certificate the following error occurs:


Your request failed. An error occurred while the server was processing your
request.

Contact your administrator for further assistance.

Request Mode:
newreq - New Request
Disposition:
(never set)
Disposition message:
(none)
Result:
Access is denied. 0x80070005 (WIN32: 5)
COM Error Info:
CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
LastStatus:
The operation completed successfully. 0x0 (WIN32: 0)
Suggested Cause:
The Certification Authority Service has not been started.


In event viewer (system) of PC2 there is:

DCOM got error "General access denied error " from the computer
computername.domainname when attempting to activate the server:
{D99E6E74-FC88-11D0-B498-00A0C90312F3}


Help me.
Thanks.

Mariano.
Click to expand...
Click to expand...
 
Did you enable basic auth for it to work?

Thanks,
Vishal Agarwal [MSFT]

--
This posting is provided "AS IS" with no warranties, and confers no rights
Mariano said:
Yes

David Cross said:
is the machine account hosting the web pages joined to the domain (AD) and
trusted for delegation?

--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

Mariano said:
Configuration
-CA (enterprise CA) is installed on a pc (PC1) with Windows Server 2003
Enterprise Edition (this computer is Domain Controller);
-Web Enrollment Pages are installed on a host computer (PC2) member of
domain;

When I launch web enrollment pages from PC2 (http://localhost/certsrv) all
works fine!
when I launch web enrollment pages from PC3 (pc3 is not member of the
domain) authenticating me with a domain account, I can navigate web pages
but when I request a certificate the following error occurs:


Your request failed. An error occurred while the server was processing your
request.

Contact your administrator for further assistance.

Request Mode:
newreq - New Request
Disposition:
(never set)
Disposition message:
(none)
Result:
Access is denied. 0x80070005 (WIN32: 5)
COM Error Info:
CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
LastStatus:
The operation completed successfully. 0x0 (WIN32: 0)
Suggested Cause:
The Certification Authority Service has not been started.


In event viewer (system) of PC2 there is:

DCOM got error "General access denied error " from the computer
computername.domainname when attempting to activate the server:
{D99E6E74-FC88-11D0-B498-00A0C90312F3}


Help me.
Thanks.

Mariano.
Click to expand...
Click to expand...
Click to expand...
 
Back
Top