Tip
Subject Content

166
Cure certificate authority access problems

Microsoft Certificate Services on a Windows 2000 or 2003 Server enables an organization to

generate its own certificates rather than purchase them from a commercial certificate authority

(CA). To request certificates from a Windows CA, just point to http://<server>/certsrv, where

<server> is the server's name or IP address. The resulting Web pages provide instructions and

options for requesting a certificate.



At one point during the request process, Internet Explorer downloads an ActiveX control from the

CA. But in some situations, the download fails and prevents the user from obtaining a certificate.

This can happen with Windows 9x clients running Internet Explorer 4.01 Service Pack 2 or earlier.

It can also happen on Windows 2000 and later systems running the latest version of Internet

Explorer.



If you run across the problem with Windows 2000 Professional clients running Internet Explorer 6,

the problem is likely not at the client. Instead, update the Windows 2000 computer running

Certificate Services.



Download the server patch, stop Certificate Services on the server, install the update, and restart

the server. Try connecting from a client to test the client's ability to successfully complete a

certificate request.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;323172

Page 166 of 237
First Previous Next Last