Thursday, July 21, 2011

Windows 2008 - Certificate Services Enrollment Error

On a couple of occasions when requesting certificates I have been presented with a popup window saying: "In order to complete certificate enrollment, the Web site for the CA must be configured to use HTTPS authentication."



The first thing I should stress is that you are prompted with this message for a reason and you should create a certificate and enable SSL as soon as possible. If for some reason this is not possible or in the interests of speed there are a couple of things you can do to workaround the need for enabling SSL and a certificate. Again, I stress this should be a short term option.

Take the following steps:

  1. Launch Internet Explorer.

  2. Select Tools > Internet Options >Security > Trusted Sites.

  3. Click the Sites button.

  4. Clear the option Require server verification (https for all sites in this zone) and add the current CA web enrollment site into the list.

  5. Click Close




  1. Launch Internet Explorer.

  2. Select Tools > Internet Options >Security

  3. Select the Zone: Internet, Local Intranet, Trusted

  4. Select the Custom Level button.

  5. In the resulting window, scroll down to Initialize and script ActiveX not marked as safe for scripting

  6. Select Enable.



0 comments: