Windows Server - how to renew the certificates issued by standalone windows 2003 se

Asked By Arunkumar
19-Nov-09 05:18 AM
How to renew the certificate issued by a standlone CA

Hi Everyone,

I have configured a standalone CA and issued ssl certificates
to end users who are Anonymous users All are made to requested through web
page Enrollment then we created the certificate and sent them through mail
along with private key. Now i need to renew
the issued  certificates validity.(all the certificates have few more months
validity time left out).

I followed the following renewal process from Tech net.

Steps I followed:

1)	Open Internet Explorer

2)	In Address, type http://servername/certsrv, where servername is the name
of the Windows 2000 Web server where the certification authority (CA) you
want to access is located

3)	Click Request a certificate, and then click advanced certificate request

4)	Click Submit a certificate request using a base64-encoded CMC or PKCS #10
file, or submit a renewal request by using a base-64-encoded PKCS #7 file


5) Do one of the following:

Open Notepad. On the File menu, click Open. Select the PKCS #10 or PKCS #7
file and click Open. On the Edit menu, click Select all, and then, on the
Edit menu, click Copy. On the Web page, click in the Saved request scroll
box. On the Edit menu, click Paste to paste the contents of certificate
request into the scroll box.

If your Web browser security settings do not prohibit a Web page from
accessing your disk, you can click Browse for a file to insert to locate the
file you want to use for the certificate request. If you get a warning about
the ActiveX control, click Yes to allow it to run, then click Browse. After
locating and selecting the file you want to use for the certificate request,
click Read!. On the Web page, click Read! to paste the contents of the file
into the scroll box. See the note about using Browse.

6)	If you are connected to an enterprise CA, choose the certificate template
you want to use.
7)	Click Submit.


Here after step NO 5 I am getting the error message as follows :

COM Error info:
CCertrequest:submit the data is invalid 0x8007000d(WIN32:13)

Suggested cause :

The certificate request contained bad data.if you are submitting a saved
request,make sure that the request
contains no garbage data outside the BEGIN and END tags, and that the file
containing the saved request is not corrupted.


I kindly invite the suggesstions .

Thanks & Regards
Arunkumar.G
CCertrequest
(1)
ActiveX
(1)
Servername
(1)
Standlone
(1)
Certsrv
(1)
Renewal
(1)
Windows
(1)
Months
(1)
  Stardust replied to Arunkumar
20-Nov-09 12:00 PM
Is the format of the text your are pasting in the browser as follows?

-----BEGIN NEW CERTIFICATE REQUEST-----
.... your certificate request comes here....
-----END NEW CERTIFICATE REQUEST-----

Make sure you delete the end trailing spaces if you have any.
Create New Account
help
from Tech net. Steps I followed: 1) Open Internet Explorer 2) In Address, type http: / / servername / certsrv, where servername is the name of the Windows 2000 Web server where the certification authority (CA) you you want to use for the certificate request. If you get a warning about the ActiveX control, click Yes to allow it to run, then click Browse. After locating and selecting after step NO 5 I am getting the error message as follows : COM Error info: CCertrequest:submit the data is invalid 0x8007000d(WIN32:13) Suggested cause : The certificate request contained bad corrupted. Any help for this issue is very much appriciated. Thanks & Regards Arunkumar Security Discussions CCertrequest (1) ActiveX (1) HiI (1) Lifecycle (1) Identity (1) Windows (1) Servername (1) Standlone (1) How exactly did you have your users generate the renewal requests? Are
users from a server but do not want to show the description. Eg map P: \ \ servername \ sharename When it maps now in windows explorer it would show sharename on servername (Servername) P: So what I'm asking is can we remove this part sharename on servername Servername) Thanks in advance is their is a solution Windows Server Discussions TweakUI (1) Servername (1) Sharename (1) Windows (1) Maps (1) Hi, Why ? ThePro Because the description from the users from a server but do not want to show the description. Eg map P: \ \ servername \ sharename When i
Profileproblem Windows Server Windows 2003 server. Userprofiles are created several times as: user user.servername.000 user.servername.001 user.servername.002 user.servername.003 Any tips ? JFolke Windows Terminal Services Discussions Active Directory (1) BSc (1) Profileproblem (1 MCP keywords: Profileproblem description: Windows 2003 server. Userprofiles are created several times as: user user.servername.000 user.servername.001 user.servername.002 user.servername.003 A
install activeX controls Windows Server I have a site that requires updating the ActiveX controls, however users don't have that right. How can I grant the right to install ActiveX control? Through gpo I've added the site to Trusted sites and enabled all the ActiveX settings. Windows Terminal Services Discussions ActiveX (1) Allow (only) Administrator Approved Active X controls and also creating an allowed list of web sites. This can be done with Group Policy Ratnesh keywords: install, activeX, controls description: I have a site that requires updating the ActiveX controls, however users don't have that right. How can I grant the right to install ActiveX control T