none
http://servername/certsrv was working, now I get a 404 error - Windows 2008 R2 Certificate Server RRS feed

  • Question

  • About a year ago, we setup a Certificate Authority on our domain.  We have a Root server and an Issuing server.  Both are running Windows 2008 R2 SP1. 

    The way we configured our CA with the AD domain, authorized PCs and Users can automatically request and be granted a Certificate.  For other situations, like a Web Server, we have a template defined.  In the past, I could open a web browser on a PC or server and go to

    http://servername/certsrv and get the page for requesting a certificate

    Now when we go to the URL, we get "

    404 - File or directory not found.

    The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.

    I checked the Certificate Issuing Server.  We have AD CS, WWW running; the Certification Authrority Role Service and the Certification Authority Web Enrollment Role Service. 

    Found these commands and ran them

    C:\>certutil -ping
    Connecting to ServerName\MH Sub CA 1 ...
    Server "MH Sub CA 1" ICertRequest2 interface is alive
    CertUtil: -ping command completed successfully.

    C:\>Certutil -v -vroot
    Web Virtual Root Already Exists
    Active Server Pages (ASP) already enabled
    File Share Already Exists
    CertUtil: -vroot command completed successfully.

    C:\Windows\System32\certsrv>dir
     Volume in drive C has no label.
     Volume Serial Number is 7C37-171F

     Directory of C:\Windows\System32\certsrv

    08/31/2011  01:36 PM    <DIR>          .
    08/31/2011  01:36 PM    <DIR>          ..
    08/31/2011  01:36 PM               467 certdat.inc
    05/04/2012  10:26 AM    <DIR>          CertEnroll
    08/31/2011  01:36 PM    <DIR>          en-US
                   1 File(s)            467 bytes
                   4 Dir(s)  26,260,496,384 bytes free

    When using the browser on the local host browser, the error looks like this:

    Server Error in Application "DEFAULT WEB SITE/CERTSRV"

    Internet Information Services 7.5

    <fieldset><legend>Error Summary</legend>

    HTTP Error 404.0 - Not Found

    The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.

    </fieldset>
    <fieldset><legend>Detailed Error Information</legend>
    Module IIS Web Core
    Notification MapRequestHandler
    Handler StaticFile
    Error Code 0x80070002
    Requested URL https://servername.mh.local:443/certsrv/certsrv
    Physical Path C:\Windows\system32\CertSrv\certsrv
    Logon Method Negotiate
    Logon User Domain\Admin
    </fieldset>

    For some reason, there is an "extra" "certsrv" at the end of the path that is not in the directory path.

    Any ideas where to look and what may need done?

    Thanks!

    Friday, May 4, 2012 3:13 PM

Answers

  • Hard to say what's wrong, but try to create a new web app that just serves up an html page.

    Basically do the following [i'm doing this from memory so i might have missed some steps]:

    - create a directory under c:\wwwroot\inetpub\mytestapp  [i think that's where it goes off the top of my head]

    - In that directory, create home.html which is just a basic html file.

    - In IIS mmc snap-in, right click on Default Web Site and create a new web app.

    - Setup the web app so that it has name mytestapp and the physical directory is the one you created in step 1 [c:\...\mytestapp]

    - Temporarily disable the https binding on the default web site.

    - Now browse to http:\\servername\mytestapp\home.html

    - Does it work? If yes then add back the https binding on the default web site? Does it still work? If yes, then double check your physical directory on the certsrv website.

    Andrew

    Saturday, May 5, 2012 4:41 AM