PIX configuration for Microsoft CA server

[j.doshi]

Hi

I am configuring PIX firewall for remote VPN clients. For Key authentication we are using Microsoft CA server.

I am configuring the firewall but it seems that it is not communicating to the CA server.

When i enroll for the certificate , i m getting error that root certificate is not available. Pls. check ca authenticatio."

Pls. let me know how can i get root certificate.

Do i need to do manual configuration on Microsoft CA server for PIX firewall ?

Regards,

Jatin

[drolemc]

Please see bug CSCdw43294. It seems that PIX is not able to work with CA subordinate servers.

[shannong]

Did you install the latest version of MSCEP on the CA?

What kind of CA is it? Enterprise root, stand-alone root, etc.

Did you verify that IIS allows anonymous access to the MSCEP directory?

Did you authenticate your CA first using [ca authenticate]

Post your CA config from the Pix.

[mmizzi]

It is possible to use the CA enterprise root with PIX, VPN concentrator and router?

Thanks