How to point Web Enrollment to the relevant Subordinate CA?
-
Thursday, February 17, 2011 5:00 PM
After installing a Subordinate CA I promptly installed Web Enrollment on it. However when trying to request a certficate via the http://<subCA>/certsrv I found that the list of available certificates that can be requested is based on the certificates issuable by my root CA and not my subordinate. The only certificate that the root CA can issue is the Subordinate CA one, where as my subordinate CA has many issuable certificates that can't be seen via web enrollment. Though they can be requested via the wizard.
Is it possible to redirect the web enrollment on the subordinate CA to be able to request certificates issuable on the subordinate CA and not from the root CA?(Because I wish to have more than one subordinate that's web enrollment requests certificates from itself and not the Root CA)
Thank you for any help
All Replies
-
Friday, June 03, 2011 6:28 AM
You can use the mmc to create a new template for you sub CA.
May be this link will help you
regards Holger Technical Specialist UC- Proposed As Answer by krymer Tuesday, June 07, 2011 5:03 AM
-
Saturday, August 27, 2011 5:48 AM
Hello,
this is happening because when you installed the web erollment you pointed the turtle towards your root CA. Now uninstall the web enrollment component and reinstall it and point it to your issuing or sub-CA. You have not mentioned the OS version your CA is running so I am listing relevant articles for 2003 and 2008 servers. And remember do not forget to take a CA Backup before you try the steps ... ting tong !
http://technet.microsoft.com/en-us/library/cc786960(WS.10).aspx
http://technet.microsoft.com/en-us/library/cc732895.aspx
Regards,
Rahul Uppal
-
Saturday, August 27, 2011 3:00 PM
Hello,
this is happening because when you installed the web erollment you pointed the turtle towards your root CA. Now uninstall the web enrollment component and reinstall it and point it to your issuing or sub-CA. You have not mentioned the OS version your CA is running so I am listing relevant articles for 2003 and 2008 servers. And remember do not forget to take a CA Backup before you try the steps ... ting tong !
http://technet.microsoft.com/en-us/library/cc786960(WS.10).aspx
http://technet.microsoft.com/en-us/library/cc732895.aspx
Regards,
Rahul Uppal
Rahul is correct, you need to reinstall it and choose at the time of installation.Also share the OS version
Please update
Mihir Nayak

