CODEWITHSUNDEEP
iis-7windows-server-2008-r2
Rahul
Rahul

Reputation: 1579

Online Certification Authority, cannot Select.

I am trying to create a domain server and when I reach to specify the online certification Authority, the select button is grayed out.I wish to select the same computer as its the certification authority.Any help is appreciated.

enter image description here

Upvotes: 9

Views: 25241

Answers (6)

Sanket 54321
Sanket 54321

Reputation: 1

I wanted to share a tip that might be useful for new users encountering an issue with the 'Online Certification Authority' where the select button is disabled. In case you face this problem, here’s a potential solution:

Solution: Ensure that you are logged in through a domain user on the server. This solution worked for me and could potentially resolve the issue for others as well. Please try this workaround and let me know if it helps.

Upvotes: 0

Neke
Neke

Reputation: 11

My AD CS was running fine but my IIS server just wouldn't let me select it. To doublecheck that my Certificate Authority server is up I run certutil.exe from CMD and I could see my CA server up and running.

I fixed it in the most canon Windows troubleshooting way. IIS restart.

Upvotes: 1

Joey
Joey

Reputation: 781

A couple more checks for those facing this issue:

  • Use a domain user and not a local user
  • Check if your CA is an enterprise CA

Upvotes: 0

bfhd
bfhd

Reputation: 363

Another way to resolve this problem, from here: https://www.experts-exchange.com/questions/27758425/Windows-2008R2-IIS-7-Domain-Certficate-problem-select-button-is-greyed-out.html

You could try enrolling the certificate through the certificates MMC snap-in instead and see if you have better luck:

Start -> Run -> type 'mmc' -> Press enter

(MMC console should open)

File -> Add/Remove Snap-in -> Select 'Certificates' -> Add -> Computer Account -> Local Computer -> Click OK out of the Add/Remove Snap-ins window.

Expand certificates -> Expand Personal -> Right click in an empty space in the main pane -> All tasks -> Request new certificate.

You should be able to run through that wizard and enroll based on your CA enrollment policies. Any certs that you enroll here and are applicable for securing websites will appear in IIS.

Upvotes: 0

Kerm Aktaev
Kerm Aktaev

Reputation: 11

I had same problem and the answer "V1 WebServer template. This template must be added to your issuing CA server." did not resolve it. But, after I ran the following in command prompt:

certreq -submit -attrib “CertificateTemplate:WebServer” request.req

my request was processes and I was issued my certificate. In addition, I got Select button is worked fine.

Upvotes: 0

armani
armani

Reputation: 123

Refer to this page: http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/e3e43894-30d5-4064-93d1-96d46ef3de14/

The answer from that thread:

note that you can enroll certificates from IIS only from default V1 WebServer template. This template must be added to your issuing CA server.

Upvotes: 0

Related Questions