Installing new CA

[Sheridan]

I'm trying to decomission our old 2003 CA which we use for internal certificates (wireless etc) but I cannot get the new 2008 server to work. I've installed CA and its created the CA certificate. I then try on a seperate machine to browse to https://server/certsrv to pull a certificate down, but I get the 'Internet explorer cannot display the webpage message'

 

If I browse to the http:// version, I get the correct pages, but it stops at the request page as it requires SSL to continue which is to be expected.

 

I've bound SSL to the site (using the ca's certificate) and can't see where else I've gone wrong with this?

[jamesreedersmith]

Proxy server set and no exception?

[Sheridan]

Its all internal - with the internal range being the exception

[the_dude]

It sounds like you are trying to use the web request method? Have you tried on your separate computer to request it via the mmc? Add the certificates >> computer >> local computer snapin, go to the personal certificate store and try requesting a certificate through there. If you are decommissioning you may want to backup the current root cert store and stand up your new root ca with the same name and import the ca db. just a thought...for continuity with your currently deployed certs. there should be a kb out there on how to do this properly.