Requesting certificate via certreq.exe to remote CA

  • Thread starter Thread starter ChrisB
  • Start date Start date
C

ChrisB

The following works on the CA server but will not work from my desktop machine:

certreq -submit -config "CA-MACHINE\some-ca-name" cert.req test.cer

From my desktop I get the error:

Certificate Request Processor: This computer was unable to communicate with
the computer providing the server. 0x8000401d (-2147467235)

My goal is to be able to provision a new machine with a SSL cert on a
website. I believe I need to request a certificate with a common name equal
to the machine name to make this work. I am also able to do all of this
manually thru IIS and the Certificate Server website but I need this to be
automated to be practical.

It is a standalone offline CA and is not part of any domain or AD
infrastructure. The CA server is Windows 2003 Server. My desktop is WinXP
Pro SP2.
 
Dear Chris,

are you able to request a certificate over 'http://CA-MACHINE/certsrv' in
your case?
I have same problem by submiting a request for a user certificate.
Same error: 0x8000401d (-2147467235)

Best regards
Soheil


"ChrisB" wrote:

> The following works on the CA server but will not work from my desktop machine:
>
> certreq -submit -config "CA-MACHINE\some-ca-name" cert.req test.cer
>
> From my desktop I get the error:
>
> Certificate Request Processor: This computer was unable to communicate with
> the computer providing the server. 0x8000401d (-2147467235)
>
> My goal is to be able to provision a new machine with a SSL cert on a
> website. I believe I need to request a certificate with a common name equal
> to the machine name to make this work. I am also able to do all of this
> manually thru IIS and the Certificate Server website but I need this to be
> automated to be practical.
>
> It is a standalone offline CA and is not part of any domain or AD
> infrastructure. The CA server is Windows 2003 Server. My desktop is WinXP
> Pro SP2.
 
Back
Top