(http://localhost/Certsrv ) errors page cant be found with 404

Alan Duck
Alan Duck used Ask the Experts™
on
have a windows 2008 SBS when I run http://loalhost/Certsrv it error page cant be found 404

I have install windows updates and also uninstalled and reinstalled the Active Directory Certificate service and the web enrollment  

still no joy
all the cert*.asp files are in the c:\widows\system32\Certsrv\en-us folder, I have tried putting en-us on to the end with no success
any ideas would be helpfull
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
AmitIT Architect
Distinguished Expert 2017

Commented:
Open cmd and run certutil.exe. Post the result.
Alan DuckTechnical Director

Author

Commented:
C:\Users\Administrator>certutil
Entry 0: (Local)
  Name:                         `davidfoxtranspo-DATA-SERVER-CA'
  Organizational Unit:          `'
  Organization:                 `'
  Locality:                     `'
  State:                        `'
  Country/region:               `'
  Config:                       `DATA-SERVER.davidfoxtranspo.local\davidfoxtrans
po-DATA-SERVER-CA'
  Exchange Certificate:         `'
  Signature Certificate:        `DATA-SERVER.davidfoxtranspo.local_davidfoxtrans
po-DATA-SERVER-CA.crt'
  Description:                  `'
  Server:                       `DATA-SERVER.davidfoxtranspo.local'
  Authority:                    `davidfoxtranspo-DATA-SERVER-CA'
  Sanitized Name:               `davidfoxtranspo-DATA-SERVER-CA'
  Short Name:                   `davidfoxtranspo-DATA-SERVER-CA'
  Sanitized Short Name:         `davidfoxtranspo-DATA-SERVER-CA'
  Flags:                        `13'
CertUtil: -dump command completed successfully.
Gaurav SinghSolutions Architect

Commented:
Do you see the certserv virtual directory in IIS? and also make sure that you have installed the AD webservices.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Alan DuckTechnical Director

Author

Commented:
the Virtual Directory is in the IIS , the Physical path exists c:\windows\system32\Certsrv\en-us
when you run the test under Basic settings it fails on Autherization can not verify path (path as above)

if you test using browes this is the result
Error Summary
HTTP Error 404.0 - Not Found
The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.
Detailed Error InformationModule
IIS Web Core
Notification
MapRequestHandler
Handler
StaticFile
Error Code 0x80070002
Requested URL
https://localhost:443/CertSrv
Physical Path
C:\Program Files\Windows Small Business Server\Bin\WebApp\SBS Web Applications\CertSrv
Logon Method
Anonymous
Logon User
Anonymous
Most likely causes:•The directory or file specified does not exist on the Web server.
•The URL contains a typographical error.
•A custom filter or module, such as URLScan, restricts access to the file.
Solutions Architect
Commented:
IN application pool -> advanced settings, enable 32 bit made is false or true? if it is false then make it true
Cris HannaSr IT Support Engineer

Commented:
I think your problem is dns.  If you go to command prompt and do no lookup localhost what does it return?
Alan DuckTechnical Director

Author

Commented:
a ns lookup fails
Alan DuckTechnical Director

Author

Commented:
IN application pool -> advanced settings, enable 32 bit made is false or true? if it is false then make it true
was set to false now set to true
AmitIT Architect
Distinguished Expert 2017

Commented:
Alan DuckTechnical Director

Author

Commented:
looking in the IIS I have noticed the default web Site has a ? when I check it the manage web site it does appear to be started , when I click start an error comes up saying :-
Default web site cannot be started another web site is using the same port

it has a SBS site running that does use both port 80 and 443 has well

is this possible the problem.
Alan DuckTechnical Director

Author

Commented:
Cris HannaSr IT Support Engineer

Commented:
The SBS site is correct.  It might be helpful to understand exactly what it is that you are trying to accomplish with the cert server and then we can provide better solutions.  SBS has some unique configurations
Alan DuckTechnical Director

Author

Commented:
we have updated the pc's and office software so now the email system wants to use Certificates
we have now created some new certificate and we were trying to self sign them using the CA on the server this is when we found the Certsvr would not run
AmitIT Architect
Distinguished Expert 2017

Commented:
Can you check the services related to certificates are running.
Cris HannaSr IT Support Engineer

Commented:
So, to create Self Signed certificates in an AD where you have SBS running, you are to use the Wizard in the SBS console.   Are you running SBS 2008 or 2011??
Alan DuckTechnical Director

Author

Commented:
SBS2008 in this case
Cris HannaSr IT Support Engineer

Commented:
This blog article from the Microsoft SBS team will explain how to create a new self signed cert using the wizard in the SBS Console and then how to distribute the cert for external users

https://blogs.technet.microsoft.com/sbs/2008/09/30/how-do-i-distribute-the-sbs-2008-self-signed-ssl-certificate-to-my-users/
Alan DuckTechnical Director

Author

Commented:
I have read this article only talks on how to distribute the certificate, , I got the Certificate created just need to certify them using CA
Cris HannaSr IT Support Engineer

Commented:
You might have skipped over the part that says...."create a new self-signed SSL certificate through the Internet Address Management Wizard (IAMW)"   The Internet Address Management Wizard (IAMW) is found on the Getting Started page of the SBS 2008 Console

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial