Certificate Services client auto-enrollment Event ID 6

This is a RODC MS Standard 2008 R2 server.
The error:
Automatic certificate enrollment for domain\user failed (0x8007003a) The specified server cannot perform the requested operation.
This is different than the Event ID 6 for RPC availability.

I have checked the certs and they appear fine but not sure if I am missing something.

Any help would be great because it is the RODC in my DMZ so many services outside rely on it for auth.

Kry
kryanCAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MaheshArchitectCommented:
For auto-enrollment check that the certificate template is used by a CA and that the CA service is running on this machine and reachable via RPC
Just telnet CA server from RODC on TCP 135 and check if it succeed ?
Also ensure that High TCP ports are opened from RODC to CA server (1024-656535 or 49152-65535 if CA server is 2008 and above)

http://support.microsoft.com/kb/832017#method4

Mahesh
0
kryanCAuthor Commented:
Thanks, telnet was good and ports are opened. Not sure but thought about deleting 509 certs in registry. Thoughts?

Kry
0
MaheshArchitectCommented:
Not sure why you require certificate on RODC ?

Anyways, you can directly delete certificate from Certificate Personnel store on RODC

Also you can request certificate for user manually through Certificate MMC console \ personnel certificates on RODC

Just ensure that you have root ca certificate installed on RODC in Trusted root certification authorities

Mahesh
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kryanCAuthor Commented:
Thanks that has cleared up the issues.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.