Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

MS CA enrollment Problem

Hello ,

i have the following scenario :

MS Certificate Server include SCEP Support . the server is the Domain Controller.

A Cisco 2610 IOS Router Version 12.2(5)

I want use the ca as authentication authorithy for a VPN ( RSA-SIG )

On the router i have configure the following :

a rsa Key pair

ip domain-name

i get a valid root certificate from the ca .

crypto ca identity myca

enrollment url http://radiustest/certsrv/mscep/mscep.dll

crl optional

when i request a certificate with the

crypto ca enroll myca

i get the certifcate fingerprint , but the the follwoing error.message displayed

"certificate enrollment request was rejected by Certificate Authority "

When i open the url http://radiustest/certsrv/mscep/mscep.dll with the browser

i get a Domain-Login Screen Username : Password :

In my opinion it is ok , because it is a DC .( only selectet user have access . The Iusr as the access- rights )

When i enter the " iuser " the Website with the fingerprint will displayed .

Is the Ca Server the problem ?

Anybody an idea ?

thanks

Hermann

1 REPLY
New Member

Re: MS CA enrollment Problem

ok , i have found a solution.

I install a Standalone CA ( no DC ) and it works.

217
Views
0
Helpful
1
Replies
CreatePlease to create content