Search the Community

Hi all, We want to renew the Root Certificate associated with our Enterprise Certificate Authority for us with our RADIUS server. Is there any implication to doing this? Will this affect any other clients that may be using certification services? Thanks!

We use PASS for our MIS, and have My School Portal for parents to be able to view their child's info, book clubs, etc. The connection between the SQL database behind PASS and My School Portal relies on us sending My School Portal a CA Root Certificate. We have the the certificates last for a year, so we create a new one annually to send over. The person who did this for us has left, and we are struggling to create a certificate now that the one made last year has expired. Does anyone have any experience of created CA Root Certificates, and would be willing to help us out? Thank you.

I have a Server 2008 R2 domain with windows xp sp3 clients. The Server 2008 R2 is a DC, Certificate Authority and NAP Server. I have cisco switches setup correctly to use 802.1x as I used to have a server 2003 domain with IAS and everything was fine. In NPS I have created a wired policy to put clients on to Vlan 2. In group policy, there are wired settings for clients to use PEAP and the Certificate to connect. The clients use machine credential. When I try and connect the client to the network..... I get Authentication Failed and in the Event Viewer on the NPS server I get: Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 06/08/2010 21:26:46 Event ID: 6273 Task Category: Network Policy Server Level: Information Keywords: Audit Failure User: N/A Computer: DC2008.ad.londonacademy.org.uk Description: Network Policy Server denied access to a user. Contact the Network Policy Server administrator for more information. User: Security ID: S-1-5-21-1961120552-2230764613-812287295-2925 Account Name: host/DIANAFINANCE.ad.londonacademy.org.uk Account Domain: LONDONACADEMY Fully Qualified Account Name: ad.londonacademy.org.uk/Admin Computers/Admin Desktops/Finance/DIANAFINANCE Client Machine: Security ID: NULL SID Account Name: - Fully Qualified Account Name: - OS-Version: - Called Station Identifier: 00-17-E0-05-90-B2 Calling Station Identifier: 00-1B-78-AE-D5-2E NAS: NAS IPv4 Address: 172.17.1.167 NAS IPv6 Address: - NAS Identifier: - NAS Port-Type: Virtual NAS Port: 60046 RADIUS Client: Client Friendly Name: 0E06-167-3560PS Client IP Address: 172.17.1.167 Authentication Details: Connection Request Policy Name: Use Windows authentication for all users Network Policy Name: Admin_PCs_Vlan2 Authentication Provider: Windows Authentication Server: DC2008.ad.londonacademy.org.uk Authentication Type: PEAP EAP Type: - Account Session Identifier: - Logging Results: Accounting information was written to the local log file. Reason Code: 23 Reason: An error occurred during the Network Policy Server use of the Extensible Authentication Protocol (EAP). Check EAP log files for EAP errors. Can anyone please help?????

Hi, Am currently tweaking our VPN that is powered by ISA 2006 from a preshared key (not given to staff, has been deployed via CMAK), however I am wanting to switch to a certificate based system due to the added benefits, namely kicking a system off the VPN without having to change the preshared key. However I've come to a stop at the most basic part... Getting the template I've created in certtmpl.msc into my certificate authority, below are the steps I've taken (referenced from SAMS Microsoft ISA 2006 Book): Creating the template I've opened up certtmpl.msc on the CA and duplicated the template named Computer, from there I enabled the option to have the private key exported and given the template a name (VPN Clients). Importing the template Now this should be the easy bit, I open the CA console and navigate to Certificate Templates, right click New, Certificate Template, a window now appears listing all my templates I can import, however my template isn't there! So am hoping someone has done something similar, my CA is running Win2k3 R2 SP2 and is setup in Enterprise mode. Thanks

Afternoon, this is driving me mad and I know it’s something simple doing this. But my Certification Authority self-service website isn’t working, 404 The page cannot be found error. Now this is strange as any file I put in that root folder 'C:\Windows\System32\certsrv\" for example like test.txt doesn’t get found even though I can see it in IIS Manager. If I make another virtual directory to say "c:\temp" all in dandy, as soon as it’s moved to system32 or below it doesn’t work! What’s stopping this, its drive me mad lol. Thank you