Smart Card Enrollment not showing in CertSrv Windows 2003 Server

-

ok first of hello all. issue similar post on forum http://social.technet.microsoft.com/forums/en-us/winserversecurity/thread/7a66ad54-63e4-4ee6-aef7-70e3dfcdfc99/ (this problem dealing server 2003 r2 enterprise sp1) in forum link there questions asked didn't seem answered.

i set windows server 2003 enterprise server enterprise root ca. (fully patched)  i have installed web enrollment role , verified working can pages , request certificates. 

i using gemalto .net 2.0 smart card scm microsystems scrx31 card reader

i have installed following certificates on server: enrollment agent, smart card user , smarcard logon. 

here main issue

but when go http://<server_name>/certsrv, request certificate, advanced not see option "request certificate smart card on behalf of user...".   option won't show on server or client trying request cert on behalf (an xp laptop)

i have added few different hotfixes. enabled active x items in internet security....iis installed. driver smart card reader installed on both server , client laptop.

http://support.microsoft.com/kb/909520

 http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=4758

can enterprise root ca on same server enrollment agent? 

i have never set smart card before directions seem simple.

http://www.gemalto.com/dwnld/5042_070520_wp_gemalto_.net_certificate_enrollment_using_msft_certificate_services.pdf

i have completed of steps in guide until asked "request certificate smart card on behalf of user...".   option isn't there. have been on web , can't find else issue. can't 1 :(

what have missed may cause option not show up? might have done out of order? seen before?

also can have multiple cas on same server?

i may have left out few details feel free ask. wits end here... in advance..

security forum right place ask question. i would suggest post there.

http://social.technet.microsoft.com/forums/en-us/winserversecurity/threads

this posting provided "as is" no warranties or guarantees , confers no rights.

most of downtime's caused because of sysadmin's curiosity ! - santosh



Windows Server  >  Windows Server General Forum



Comments

Post a Comment

Popular posts from this blog

Edit Group Policy

-
i have pc has power settings pushed out default domain policy in ad environment. of course on local machine "some settings managed system adminstrator". the machine temporarily no longer in contact domain controller (it's been physically moved , not on same network now) can't updated gpo settings. i believe if edit local group policy won't make difference because of group policy processing , precedence. since it's temporary away ad network, still want use settings of ad user. is there somewhere in registry stored can edit power plan manually until can sync domain? (i need prevent sleeping while plugged in - it's set 1 hour) thanks! allen crist i found site: http://gpsearch.azurewebsites.net/#7916 i able add policy to hkey_local_machine\software\policies\microsoft\power using specs found on site. looks solved issue. i'll report if didn't. thanks! allen crist ...
Read more

Hyper-V VM not reaching OS 'Logon' screen

-
i trying migrate vm vmware hyper-v. so far have done following (seemingly successfully): prepare vmware vm conversion hyper-v format (vhd) within vmware workstation 8.0 environment following steps guide: http://social.technet.microsoft.com/forums/en/winserverhyperv/thread/ef8c12f7-c45d-442e-9a30-c43cd87df3b3   (i.e. remove vm tools, add new ide hard disk…) use vmdk2vhd application convert individual vmdk files vhd ones create new vm in hyper-v exporting in 3 newly converted vhd files at point have checked settings , powered on vm in hyper-v find although windows begins load expected manages reach screen prior login screen saying either of following messages: “windows starting up…” “the active directory rebuilding indices… please wait” to knowledge, albeit limited in area, vm should present me login screen since appears in vmware. if start vm in safe mode can login not desired affect. below details of vm: operating system: windows server 2003 (enterprise edit...
Read more

DNS question...

-
i new setting dns server....my domain name expl. "domain.com"....i set "a" record in forward lookup for  www.domain.com itself...."server's local ip"....i've added no other zones , i seem able resolve names except own....www.domain.com.....also, do i put my isp's dns ip's....for external dns's server can't resolve?....forwarding or in nic setup?......i want setup in my dns server don't have include them on client side..... thanks mark     not put isp dsn server address in settings on nic dc or clients. should point local dns server on dc. set dns forward public dns, such isp. bill Windows Server  >  Network Infrastructure Servers
Read more