IIS Server Security - Obtaining a Machine Certificate via Web Enrollment

Author

Obtaining a Machine Certificate via Web Enrollment

bkmonroe

2006-06-07, 7:22 pm

I have an Windows 2003 Enterprise CA setup to auto-enroll domain computers
with a machine certificate for the purpose of L2TP VPN. This works great.
The problem is getting a machine certificate for non-domain computers. When
going to enroll for a certificate via web http://servername/certsrv the only
drop down choices are "Basic EFS" and "User". Neither certificate is valid.
How do I add certificates to the web enrollment page? I need to add a
machine certificate with Client Authentication.

Thank you so much for any help,
Brian Monroe

bkmonroe

2006-06-08, 1:25 pm

This is the answer:
http://support.microsoft.com/defaul...b;en-us;M555281

From Certificate Services you need to duplicate the IPSec (Offline Request)
template. Set the permissions correctly and it will show up on the web
enrollment page.

-B

"bkmonroe" wrote:

> I have an Windows 2003 Enterprise CA setup to auto-enroll domain computers
> with a machine certificate for the purpose of L2TP VPN. This works great.
> The problem is getting a machine certificate for non-domain computers. When
> going to enroll for a certificate via web http://servername/certsrv the only
> drop down choices are "Basic EFS" and "User". Neither certificate is valid.
> How do I add certificates to the web enrollment page? I need to add a
> machine certificate with Client Authentication.
>
> Thank you so much for any help,
> Brian Monroe
>