Networking Forums

Networking Forums > Computer Networking > Windows Networking > SSLinstall problem

Reply
Thread Tools Display Modes

SSLinstall problem

 
 
Armen Kirakosyan
Guest
Posts: n/a

 
      02-04-2005, 06:29 AM
hi
I have a small trouble with installing Certificate Services on my Windows
2003 server
I have tried with Domain controler and Stand alone server
the problem is the same
After chousing in installation options CA type
Enterprise root CA or Stand-alone root CA
I am asked for
Common name for this CA
and
Preview of distinguished name
In the first line I type server name f.e. SERVER1
And after installatiion start
there is an error that Windows cannot find the network path (Win32; 51)
can you help me?
and please what does it mean? (Preview of distinguished name)

Thank you


 
Reply With Quote
 
 
 
 
Steven L Umbach
Guest
Posts: n/a

 
      02-04-2005, 07:26 AM
I would not use the name of the server but pick a different but relevant
name for the CA. The Preview of distinguished name is showing what the
distinguished name will be based on the info you entered and that is how
Active Directory and ldap refer to computer objects.

My guess is you have a network connectivity or dns problem with the domain
computers. Look in Event Viewer for any pertinent clues and run the support
tool netdiag on the domain controller and the domain server where you are
trying to install the CA and also run dcdiag on the domain controller. Any
failed tests or errors can give you a clue as to what problems exist that
need to be fixed. See the link below on how dns must be configured in an
Active Directory domain. If you tried to install the root CA on a non domain
server there should not be a problem with network path as dns is not
relevant in that case since the computer does not need to contact a domain
controller. --- Steve

http://support.microsoft.com/default...b;en-us;321708 --- netdiag
and how to install support tools.
http://support.microsoft.com/default...en-us%3B291382 -- AD
dns FAQ.

"Armen Kirakosyan" <(E-Mail Removed)> wrote in message
news:u$(E-Mail Removed)...
> hi
> I have a small trouble with installing Certificate Services on my Windows
> 2003 server
> I have tried with Domain controler and Stand alone server
> the problem is the same
> After chousing in installation options CA type
> Enterprise root CA or Stand-alone root CA
> I am asked for
> Common name for this CA
> and
> Preview of distinguished name
> In the first line I type server name f.e. SERVER1
> And after installatiion start
> there is an error that Windows cannot find the network path (Win32; 51)
> can you help me?
> and please what does it mean? (Preview of distinguished name)
>
> Thank you
>



 
Reply With Quote
 
Armen Kirakosyan
Guest
Posts: n/a

 
      02-06-2005, 09:41 AM
HI
thanks
but there was nothing in netdiag
I have checke DNS server
there was no error too :-(
please note that sometimes there is another error: 1214, about the format of
the specified network name is invalid
but I just type name in CN section.

There is an error in Event Log

Event Type: Warning
Event Source: CertSvc
Event Category: None
Description:
Certificate Services temporarily added the root certificate of certificate
chain 0 to the downloaded Enterprise Root store. If this problem persists,
publishing the root certificate to the Active Directory may be necessary.

:-(
end nothing else




"Steven L Umbach" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I would not use the name of the server but pick a different but relevant
>name for the CA. The Preview of distinguished name is showing what the
>distinguished name will be based on the info you entered and that is how
>Active Directory and ldap refer to computer objects.
>
> My guess is you have a network connectivity or dns problem with the domain
> computers. Look in Event Viewer for any pertinent clues and run the
> support tool netdiag on the domain controller and the domain server where
> you are trying to install the CA and also run dcdiag on the domain
> controller. Any failed tests or errors can give you a clue as to what
> problems exist that need to be fixed. See the link below on how dns must
> be configured in an Active Directory domain. If you tried to install the
> root CA on a non domain server there should not be a problem with network
> path as dns is not relevant in that case since the computer does not need
> to contact a domain controller. --- Steve
>
> http://support.microsoft.com/default...b;en-us;321708 ---
> netdiag and how to install support tools.
> http://support.microsoft.com/default...en-us%3B291382 -- AD
> dns FAQ.
>
> "Armen Kirakosyan" <(E-Mail Removed)> wrote in message
> news:u$(E-Mail Removed)...
>> hi
>> I have a small trouble with installing Certificate Services on my Windows
>> 2003 server
>> I have tried with Domain controler and Stand alone server
>> the problem is the same
>> After chousing in installation options CA type
>> Enterprise root CA or Stand-alone root CA
>> I am asked for
>> Common name for this CA
>> and
>> Preview of distinguished name
>> In the first line I type server name f.e. SERVER1
>> And after installatiion start
>> there is an error that Windows cannot find the network path (Win32; 51)
>> can you help me?
>> and please what does it mean? (Preview of distinguished name)
>>
>> Thank you
>>

>
>



 
Reply With Quote
 
Steven L Umbach
Guest
Posts: n/a

 
      02-06-2005, 11:38 PM
You error message seems to indicate there may already be a Certificate
Authority but the CA certificate is not published in Active Directory. If
you try to install a CA on a non domain computer make sure you are trying to
install a "stand alone" root CA as Enterprise CA can only be installed on a
domain member computer. Your post indicates that you are trying to install a
ssl certificate. Just keep in mind that an internal CA certificate would
only be useful for ssl sessions to a web server from your network computers
or others that trusted your CA. If you are trying to install a CA on a
domain computer double check that the domain computer is using ONLY Active
Directory domain controllers running dns with the domain zone as it's
preferred dns servers and that it can ping them by name and fully qualified
domain. The link below may help on steps to install a CA. --- Steve

http://www.isaserver.org/img/upl/vpn...bwebenroll.htm

"Armen Kirakosyan" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> HI
> thanks
> but there was nothing in netdiag
> I have checke DNS server
> there was no error too :-(
> please note that sometimes there is another error: 1214, about the format
> of the specified network name is invalid
> but I just type name in CN section.
>
> There is an error in Event Log
>
> Event Type: Warning
> Event Source: CertSvc
> Event Category: None
> Description:
> Certificate Services temporarily added the root certificate of certificate
> chain 0 to the downloaded Enterprise Root store. If this problem
> persists, publishing the root certificate to the Active Directory may be
> necessary.
>
> :-(
> end nothing else
>
>
>
>
> "Steven L Umbach" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>>I would not use the name of the server but pick a different but relevant
>>name for the CA. The Preview of distinguished name is showing what the
>>distinguished name will be based on the info you entered and that is how
>>Active Directory and ldap refer to computer objects.
>>
>> My guess is you have a network connectivity or dns problem with the
>> domain computers. Look in Event Viewer for any pertinent clues and run
>> the support tool netdiag on the domain controller and the domain server
>> where you are trying to install the CA and also run dcdiag on the domain
>> controller. Any failed tests or errors can give you a clue as to what
>> problems exist that need to be fixed. See the link below on how dns must
>> be configured in an Active Directory domain. If you tried to install the
>> root CA on a non domain server there should not be a problem with network
>> path as dns is not relevant in that case since the computer does not need
>> to contact a domain controller. --- Steve
>>
>> http://support.microsoft.com/default...b;en-us;321708 ---
>> netdiag and how to install support tools.
>> http://support.microsoft.com/default...en-us%3B291382 --
>> AD dns FAQ.
>>
>> "Armen Kirakosyan" <(E-Mail Removed)> wrote in message
>> news:u$(E-Mail Removed)...
>>> hi
>>> I have a small trouble with installing Certificate Services on my
>>> Windows 2003 server
>>> I have tried with Domain controler and Stand alone server
>>> the problem is the same
>>> After chousing in installation options CA type
>>> Enterprise root CA or Stand-alone root CA
>>> I am asked for
>>> Common name for this CA
>>> and
>>> Preview of distinguished name
>>> In the first line I type server name f.e. SERVER1
>>> And after installatiion start
>>> there is an error that Windows cannot find the network path (Win32; 51)
>>> can you help me?
>>> and please what does it mean? (Preview of distinguished name)
>>>
>>> Thank you
>>>

>>
>>

>
>



 
Reply With Quote
 
Steven L Umbach
Guest
Posts: n/a

 
      02-06-2005, 11:50 PM
Ignore the parts in the link about publishing to ISA server. The parts about
installing the CA, a stand alone in this case, are pretty good step by step
guide. --- Steve


"Steven L Umbach" <(E-Mail Removed)> wrote in message
news:eu$(E-Mail Removed)...
> You error message seems to indicate there may already be a Certificate
> Authority but the CA certificate is not published in Active Directory. If
> you try to install a CA on a non domain computer make sure you are trying
> to install a "stand alone" root CA as Enterprise CA can only be installed
> on a domain member computer. Your post indicates that you are trying to
> install a ssl certificate. Just keep in mind that an internal CA
> certificate would only be useful for ssl sessions to a web server from
> your network computers or others that trusted your CA. If you are trying
> to install a CA on a domain computer double check that the domain computer
> is using ONLY Active Directory domain controllers running dns with the
> domain zone as it's preferred dns servers and that it can ping them by
> name and fully qualified domain. The link below may help on steps to
> install a CA. --- Steve
>
> http://www.isaserver.org/img/upl/vpn...bwebenroll.htm
>
> "Armen Kirakosyan" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
>> HI
>> thanks
>> but there was nothing in netdiag
>> I have checke DNS server
>> there was no error too :-(
>> please note that sometimes there is another error: 1214, about the format
>> of the specified network name is invalid
>> but I just type name in CN section.
>>
>> There is an error in Event Log
>>
>> Event Type: Warning
>> Event Source: CertSvc
>> Event Category: None
>> Description:
>> Certificate Services temporarily added the root certificate of
>> certificate chain 0 to the downloaded Enterprise Root store. If this
>> problem persists, publishing the root certificate to the Active Directory
>> may be necessary.
>>
>> :-(
>> end nothing else
>>
>>
>>
>>
>> "Steven L Umbach" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>>>I would not use the name of the server but pick a different but relevant
>>>name for the CA. The Preview of distinguished name is showing what the
>>>distinguished name will be based on the info you entered and that is how
>>>Active Directory and ldap refer to computer objects.
>>>
>>> My guess is you have a network connectivity or dns problem with the
>>> domain computers. Look in Event Viewer for any pertinent clues and run
>>> the support tool netdiag on the domain controller and the domain server
>>> where you are trying to install the CA and also run dcdiag on the domain
>>> controller. Any failed tests or errors can give you a clue as to what
>>> problems exist that need to be fixed. See the link below on how dns must
>>> be configured in an Active Directory domain. If you tried to install the
>>> root CA on a non domain server there should not be a problem with
>>> network path as dns is not relevant in that case since the computer does
>>> not need to contact a domain controller. --- Steve
>>>
>>> http://support.microsoft.com/default...b;en-us;321708 ---
>>> netdiag and how to install support tools.
>>> http://support.microsoft.com/default...en-us%3B291382 --
>>> AD dns FAQ.
>>>
>>> "Armen Kirakosyan" <(E-Mail Removed)> wrote in message
>>> news:u$(E-Mail Removed)...
>>>> hi
>>>> I have a small trouble with installing Certificate Services on my
>>>> Windows 2003 server
>>>> I have tried with Domain controler and Stand alone server
>>>> the problem is the same
>>>> After chousing in installation options CA type
>>>> Enterprise root CA or Stand-alone root CA
>>>> I am asked for
>>>> Common name for this CA
>>>> and
>>>> Preview of distinguished name
>>>> In the first line I type server name f.e. SERVER1
>>>> And after installatiion start
>>>> there is an error that Windows cannot find the network path (Win32; 51)
>>>> can you help me?
>>>> and please what does it mean? (Preview of distinguished name)
>>>>
>>>> Thank you
>>>>
>>>
>>>

>>
>>

>
>



 
Reply With Quote
 
Armen Kirakosyan
Guest
Posts: n/a

 
      02-07-2005, 06:19 AM
HI
Thanks I have already checked that good article :-(
and that did not help me

The problem is the installation problem
I did not say that the error occurs during installation !!
in install window is writting installing certificate service ........
and that error occurs
I press Ok
and after finishing install
I see that Sertificate services are not installed, there is no check box in
installed components!

:-(

For note
I am trieng to install on Domain Controller
The DNS server and Web server on the same Computer
I am using Win2003 server. with all Sps and hot fixes.

And I am going to use them to encrypt my web site session (clients which
connect to my web) and if it is possible to make encryption for my domain
email users.

"Steven L Umbach" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Ignore the parts in the link about publishing to ISA server. The parts
> about installing the CA, a stand alone in this case, are pretty good step
> by step guide. --- Steve
>
>
> "Steven L Umbach" <(E-Mail Removed)> wrote in message
> news:eu$(E-Mail Removed)...
>> You error message seems to indicate there may already be a Certificate
>> Authority but the CA certificate is not published in Active Directory. If
>> you try to install a CA on a non domain computer make sure you are trying
>> to install a "stand alone" root CA as Enterprise CA can only be installed
>> on a domain member computer. Your post indicates that you are trying to
>> install a ssl certificate. Just keep in mind that an internal CA
>> certificate would only be useful for ssl sessions to a web server from
>> your network computers or others that trusted your CA. If you are trying
>> to install a CA on a domain computer double check that the domain
>> computer is using ONLY Active Directory domain controllers running dns
>> with the domain zone as it's preferred dns servers and that it can ping
>> them by name and fully qualified domain. The link below may help on
>> steps to install a CA. --- Steve
>>
>> http://www.isaserver.org/img/upl/vpn...bwebenroll.htm
>>
>> "Armen Kirakosyan" <(E-Mail Removed)> wrote in message
>> news:%(E-Mail Removed)...
>>> HI
>>> thanks
>>> but there was nothing in netdiag
>>> I have checke DNS server
>>> there was no error too :-(
>>> please note that sometimes there is another error: 1214, about the
>>> format of the specified network name is invalid
>>> but I just type name in CN section.
>>>
>>> There is an error in Event Log
>>>
>>> Event Type: Warning
>>> Event Source: CertSvc
>>> Event Category: None
>>> Description:
>>> Certificate Services temporarily added the root certificate of
>>> certificate chain 0 to the downloaded Enterprise Root store. If this
>>> problem persists, publishing the root certificate to the Active
>>> Directory may be necessary.
>>>
>>> :-(
>>> end nothing else
>>>
>>>
>>>
>>>
>>> "Steven L Umbach" <(E-Mail Removed)> wrote in message
>>> news:(E-Mail Removed)...
>>>>I would not use the name of the server but pick a different but relevant
>>>>name for the CA. The Preview of distinguished name is showing what the
>>>>distinguished name will be based on the info you entered and that is how
>>>>Active Directory and ldap refer to computer objects.
>>>>
>>>> My guess is you have a network connectivity or dns problem with the
>>>> domain computers. Look in Event Viewer for any pertinent clues and run
>>>> the support tool netdiag on the domain controller and the domain server
>>>> where you are trying to install the CA and also run dcdiag on the
>>>> domain controller. Any failed tests or errors can give you a clue as to
>>>> what problems exist that need to be fixed. See the link below on how
>>>> dns must be configured in an Active Directory domain. If you tried to
>>>> install the root CA on a non domain server there should not be a
>>>> problem with network path as dns is not relevant in that case since the
>>>> computer does not need to contact a domain controller. --- Steve
>>>>
>>>> http://support.microsoft.com/default...b;en-us;321708 ---
>>>> netdiag and how to install support tools.
>>>> http://support.microsoft.com/default...en-us%3B291382 --
>>>> AD dns FAQ.
>>>>
>>>> "Armen Kirakosyan" <(E-Mail Removed)> wrote in message
>>>> news:u$(E-Mail Removed)...
>>>>> hi
>>>>> I have a small trouble with installing Certificate Services on my
>>>>> Windows 2003 server
>>>>> I have tried with Domain controler and Stand alone server
>>>>> the problem is the same
>>>>> After chousing in installation options CA type
>>>>> Enterprise root CA or Stand-alone root CA
>>>>> I am asked for
>>>>> Common name for this CA
>>>>> and
>>>>> Preview of distinguished name
>>>>> In the first line I type server name f.e. SERVER1
>>>>> And after installatiion start
>>>>> there is an error that Windows cannot find the network path (Win32;
>>>>> 51)
>>>>> can you help me?
>>>>> and please what does it mean? (Preview of distinguished name)
>>>>>
>>>>> Thank you
>>>>>
>>>>
>>>>
>>>
>>>

>>
>>

>
>



 
Reply With Quote
 
Steven L Umbach
Guest
Posts: n/a

 
      02-07-2005, 08:55 PM
Hmm. I am about out of ideas. Out of curiosity when you check services
[services.msc] on that server does it show certificate services?? I ask
because of the error message you posted refers to the certificate service.
Also look in the mmc snapin for computer certificates to see if a
certificate is shown in the personal folder certificates folder? --- Steve


"Armen Kirakosyan" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> HI
> Thanks I have already checked that good article :-(
> and that did not help me
>
> The problem is the installation problem
> I did not say that the error occurs during installation !!
> in install window is writting installing certificate service ........
> and that error occurs
> I press Ok
> and after finishing install
> I see that Sertificate services are not installed, there is no check box
> in installed components!
>
> :-(
>
> For note
> I am trieng to install on Domain Controller
> The DNS server and Web server on the same Computer
> I am using Win2003 server. with all Sps and hot fixes.
>
> And I am going to use them to encrypt my web site session (clients which
> connect to my web) and if it is possible to make encryption for my domain
> email users.
>
> "Steven L Umbach" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Ignore the parts in the link about publishing to ISA server. The parts
>> about installing the CA, a stand alone in this case, are pretty good step
>> by step guide. --- Steve
>>
>>
>> "Steven L Umbach" <(E-Mail Removed)> wrote in message
>> news:eu$(E-Mail Removed)...
>>> You error message seems to indicate there may already be a Certificate
>>> Authority but the CA certificate is not published in Active Directory.
>>> If you try to install a CA on a non domain computer make sure you are
>>> trying to install a "stand alone" root CA as Enterprise CA can only be
>>> installed on a domain member computer. Your post indicates that you are
>>> trying to install a ssl certificate. Just keep in mind that an internal
>>> CA certificate would only be useful for ssl sessions to a web server
>>> from your network computers or others that trusted your CA. If you are
>>> trying to install a CA on a domain computer double check that the domain
>>> computer is using ONLY Active Directory domain controllers running dns
>>> with the domain zone as it's preferred dns servers and that it can ping
>>> them by name and fully qualified domain. The link below may help on
>>> steps to install a CA. --- Steve
>>>
>>> http://www.isaserver.org/img/upl/vpn...bwebenroll.htm
>>>
>>> "Armen Kirakosyan" <(E-Mail Removed)> wrote in message
>>> news:%(E-Mail Removed)...
>>>> HI
>>>> thanks
>>>> but there was nothing in netdiag
>>>> I have checke DNS server
>>>> there was no error too :-(
>>>> please note that sometimes there is another error: 1214, about the
>>>> format of the specified network name is invalid
>>>> but I just type name in CN section.
>>>>
>>>> There is an error in Event Log
>>>>
>>>> Event Type: Warning
>>>> Event Source: CertSvc
>>>> Event Category: None
>>>> Description:
>>>> Certificate Services temporarily added the root certificate of
>>>> certificate chain 0 to the downloaded Enterprise Root store. If this
>>>> problem persists, publishing the root certificate to the Active
>>>> Directory may be necessary.
>>>>
>>>> :-(
>>>> end nothing else
>>>>
>>>>
>>>>
>>>>
>>>> "Steven L Umbach" <(E-Mail Removed)> wrote in message
>>>> news:(E-Mail Removed)...
>>>>>I would not use the name of the server but pick a different but
>>>>>relevant name for the CA. The Preview of distinguished name is showing
>>>>>what the distinguished name will be based on the info you entered and
>>>>>that is how Active Directory and ldap refer to computer objects.
>>>>>
>>>>> My guess is you have a network connectivity or dns problem with the
>>>>> domain computers. Look in Event Viewer for any pertinent clues and run
>>>>> the support tool netdiag on the domain controller and the domain
>>>>> server where you are trying to install the CA and also run dcdiag on
>>>>> the domain controller. Any failed tests or errors can give you a clue
>>>>> as to what problems exist that need to be fixed. See the link below on
>>>>> how dns must be configured in an Active Directory domain. If you tried
>>>>> to install the root CA on a non domain server there should not be a
>>>>> problem with network path as dns is not relevant in that case since
>>>>> the computer does not need to contact a domain controller. --- Steve
>>>>>
>>>>> http://support.microsoft.com/default...b;en-us;321708 ---
>>>>> netdiag and how to install support tools.
>>>>>
>>>>> tp://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382 --
>>>>> AD dns FAQ.
>>>>>
>>>>> "Armen Kirakosyan" <(E-Mail Removed)> wrote in message
>>>>> news:u$(E-Mail Removed)...
>>>>>> hi
>>>>>> I have a small trouble with installing Certificate Services on my
>>>>>> Windows 2003 server
>>>>>> I have tried with Domain controler and Stand alone server
>>>>>> the problem is the same
>>>>>> After chousing in installation options CA type
>>>>>> Enterprise root CA or Stand-alone root CA
>>>>>> I am asked for
>>>>>> Common name for this CA
>>>>>> and
>>>>>> Preview of distinguished name
>>>>>> In the first line I type server name f.e. SERVER1
>>>>>> And after installatiion start
>>>>>> there is an error that Windows cannot find the network path (Win32;
>>>>>> 51)
>>>>>> can you help me?
>>>>>> and please what does it mean? (Preview of distinguished name)
>>>>>>
>>>>>> Thank you
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>

>>
>>

>
>



 
Reply With Quote
 
Armen Kirakosyan
Guest
Posts: n/a

 
      02-08-2005, 08:43 AM
I have check
Unfortunatrely there is no Sertificate Services in Services List !!
How I wrote sertificate services falil during of install :-(



"Steven L Umbach" <(E-Mail Removed)> wrote in message
news:e9A$Y%(E-Mail Removed)...
> Hmm. I am about out of ideas. Out of curiosity when you check services
> [services.msc] on that server does it show certificate services?? I ask
> because of the error message you posted refers to the certificate service.
> Also look in the mmc snapin for computer certificates to see if a
> certificate is shown in the personal folder certificates folder? ---
> Steve
>
>
> "Armen Kirakosyan" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> HI
>> Thanks I have already checked that good article :-(
>> and that did not help me
>>
>> The problem is the installation problem
>> I did not say that the error occurs during installation !!
>> in install window is writting installing certificate service ........
>> and that error occurs
>> I press Ok
>> and after finishing install
>> I see that Sertificate services are not installed, there is no check box
>> in installed components!
>>
>> :-(
>>
>> For note
>> I am trieng to install on Domain Controller
>> The DNS server and Web server on the same Computer
>> I am using Win2003 server. with all Sps and hot fixes.
>>
>> And I am going to use them to encrypt my web site session (clients which
>> connect to my web) and if it is possible to make encryption for my domain
>> email users.
>>
>> "Steven L Umbach" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>>> Ignore the parts in the link about publishing to ISA server. The parts
>>> about installing the CA, a stand alone in this case, are pretty good
>>> step by step guide. --- Steve
>>>
>>>
>>> "Steven L Umbach" <(E-Mail Removed)> wrote in message
>>> news:eu$(E-Mail Removed)...
>>>> You error message seems to indicate there may already be a Certificate
>>>> Authority but the CA certificate is not published in Active Directory.
>>>> If you try to install a CA on a non domain computer make sure you are
>>>> trying to install a "stand alone" root CA as Enterprise CA can only be
>>>> installed on a domain member computer. Your post indicates that you are
>>>> trying to install a ssl certificate. Just keep in mind that an internal
>>>> CA certificate would only be useful for ssl sessions to a web server
>>>> from your network computers or others that trusted your CA. If you are
>>>> trying to install a CA on a domain computer double check that the
>>>> domain computer is using ONLY Active Directory domain controllers
>>>> running dns with the domain zone as it's preferred dns servers and that
>>>> it can ping them by name and fully qualified domain. The link below
>>>> may help on steps to install a CA. --- Steve
>>>>
>>>> http://www.isaserver.org/img/upl/vpn...bwebenroll.htm
>>>>
>>>> "Armen Kirakosyan" <(E-Mail Removed)> wrote in message
>>>> news:%(E-Mail Removed)...
>>>>> HI
>>>>> thanks
>>>>> but there was nothing in netdiag
>>>>> I have checke DNS server
>>>>> there was no error too :-(
>>>>> please note that sometimes there is another error: 1214, about the
>>>>> format of the specified network name is invalid
>>>>> but I just type name in CN section.
>>>>>
>>>>> There is an error in Event Log
>>>>>
>>>>> Event Type: Warning
>>>>> Event Source: CertSvc
>>>>> Event Category: None
>>>>> Description:
>>>>> Certificate Services temporarily added the root certificate of
>>>>> certificate chain 0 to the downloaded Enterprise Root store. If this
>>>>> problem persists, publishing the root certificate to the Active
>>>>> Directory may be necessary.
>>>>>
>>>>> :-(
>>>>> end nothing else
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> "Steven L Umbach" <(E-Mail Removed)> wrote in message
>>>>> news:(E-Mail Removed)...
>>>>>>I would not use the name of the server but pick a different but
>>>>>>relevant name for the CA. The Preview of distinguished name is showing
>>>>>>what the distinguished name will be based on the info you entered and
>>>>>>that is how Active Directory and ldap refer to computer objects.
>>>>>>
>>>>>> My guess is you have a network connectivity or dns problem with the
>>>>>> domain computers. Look in Event Viewer for any pertinent clues and
>>>>>> run the support tool netdiag on the domain controller and the domain
>>>>>> server where you are trying to install the CA and also run dcdiag on
>>>>>> the domain controller. Any failed tests or errors can give you a clue
>>>>>> as to what problems exist that need to be fixed. See the link below
>>>>>> on how dns must be configured in an Active Directory domain. If you
>>>>>> tried to install the root CA on a non domain server there should not
>>>>>> be a problem with network path as dns is not relevant in that case
>>>>>> since the computer does not need to contact a domain controller. ---
>>>>>> Steve
>>>>>>
>>>>>> http://support.microsoft.com/default...b;en-us;321708 ---
>>>>>> netdiag and how to install support tools.
>>>>>>
>>>>>> tp://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382 --
>>>>>> AD dns FAQ.
>>>>>>
>>>>>> "Armen Kirakosyan" <(E-Mail Removed)> wrote in message
>>>>>> news:u$(E-Mail Removed)...
>>>>>>> hi
>>>>>>> I have a small trouble with installing Certificate Services on my
>>>>>>> Windows 2003 server
>>>>>>> I have tried with Domain controler and Stand alone server
>>>>>>> the problem is the same
>>>>>>> After chousing in installation options CA type
>>>>>>> Enterprise root CA or Stand-alone root CA
>>>>>>> I am asked for
>>>>>>> Common name for this CA
>>>>>>> and
>>>>>>> Preview of distinguished name
>>>>>>> In the first line I type server name f.e. SERVER1
>>>>>>> And after installatiion start
>>>>>>> there is an error that Windows cannot find the network path (Win32;
>>>>>>> 51)
>>>>>>> can you help me?
>>>>>>> and please what does it mean? (Preview of distinguished name)
>>>>>>>
>>>>>>> Thank you
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>

>>
>>

>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Strange problem: no problem with Linux, when I boot windows 2K network is down... Santa Linux Networking 11 11-29-2004 06:46 AM



1 2 3 4 5 6 7 8 9 10 11