(http://localhost/Certsrv ) errors page cant be found with 404

have a windows 2008 SBS when I run http://loalhost/Certsrv it error page cant be found 404

I have install windows updates and also uninstalled and reinstalled the Active Directory Certificate service and the web enrollment  

still no joy
all the cert*.asp files are in the c:\widows\system32\Certsrv\en-us folder, I have tried putting en-us on to the end with no success
any ideas would be helpfull
Alan DuckTechnical DirectorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

AmitIT ArchitectCommented:
Open cmd and run certutil.exe. Post the result.
Alan DuckTechnical DirectorAuthor Commented:
C:\Users\Administrator>certutil
Entry 0: (Local)
  Name:                         `davidfoxtranspo-DATA-SERVER-CA'
  Organizational Unit:          `'
  Organization:                 `'
  Locality:                     `'
  State:                        `'
  Country/region:               `'
  Config:                       `DATA-SERVER.davidfoxtranspo.local\davidfoxtrans
po-DATA-SERVER-CA'
  Exchange Certificate:         `'
  Signature Certificate:        `DATA-SERVER.davidfoxtranspo.local_davidfoxtrans
po-DATA-SERVER-CA.crt'
  Description:                  `'
  Server:                       `DATA-SERVER.davidfoxtranspo.local'
  Authority:                    `davidfoxtranspo-DATA-SERVER-CA'
  Sanitized Name:               `davidfoxtranspo-DATA-SERVER-CA'
  Short Name:                   `davidfoxtranspo-DATA-SERVER-CA'
  Sanitized Short Name:         `davidfoxtranspo-DATA-SERVER-CA'
  Flags:                        `13'
CertUtil: -dump command completed successfully.
Gaurav SinghHead - Managed ServicesCommented:
Do you see the certserv virtual directory in IIS? and also make sure that you have installed the AD webservices.
Your Guide to Achieving IT Business Success

The IT Service Excellence Tool Kit has best practices to keep your clients happy and business booming. Inside, you’ll find everything you need to increase client satisfaction and retention, become more competitive, and increase your overall success.

Alan DuckTechnical DirectorAuthor Commented:
the Virtual Directory is in the IIS , the Physical path exists c:\windows\system32\Certsrv\en-us
when you run the test under Basic settings it fails on Autherization can not verify path (path as above)

if you test using browes this is the result
Error Summary
HTTP Error 404.0 - Not Found
The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.
Detailed Error InformationModule
IIS Web Core
Notification
MapRequestHandler
Handler
StaticFile
Error Code 0x80070002
Requested URL
https://localhost:443/CertSrv
Physical Path
C:\Program Files\Windows Small Business Server\Bin\WebApp\SBS Web Applications\CertSrv
Logon Method
Anonymous
Logon User
Anonymous
Most likely causes:•The directory or file specified does not exist on the Web server.
•The URL contains a typographical error.
•A custom filter or module, such as URLScan, restricts access to the file.
Gaurav SinghHead - Managed ServicesCommented:
IN application pool -> advanced settings, enable 32 bit made is false or true? if it is false then make it true

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Cris HannaSr IT Support EngineerCommented:
I think your problem is dns.  If you go to command prompt and do no lookup localhost what does it return?
Alan DuckTechnical DirectorAuthor Commented:
a ns lookup fails
Alan DuckTechnical DirectorAuthor Commented:
IN application pool -> advanced settings, enable 32 bit made is false or true? if it is false then make it true
was set to false now set to true
AmitIT ArchitectCommented:
Alan DuckTechnical DirectorAuthor Commented:
looking in the IIS I have noticed the default web Site has a ? when I check it the manage web site it does appear to be started , when I click start an error comes up saying :-
Default web site cannot be started another web site is using the same port

it has a SBS site running that does use both port 80 and 443 has well

is this possible the problem.
Alan DuckTechnical DirectorAuthor Commented:
Cris HannaSr IT Support EngineerCommented:
The SBS site is correct.  It might be helpful to understand exactly what it is that you are trying to accomplish with the cert server and then we can provide better solutions.  SBS has some unique configurations
Alan DuckTechnical DirectorAuthor Commented:
we have updated the pc's and office software so now the email system wants to use Certificates
we have now created some new certificate and we were trying to self sign them using the CA on the server this is when we found the Certsvr would not run
AmitIT ArchitectCommented:
Can you check the services related to certificates are running.
Cris HannaSr IT Support EngineerCommented:
So, to create Self Signed certificates in an AD where you have SBS running, you are to use the Wizard in the SBS console.   Are you running SBS 2008 or 2011??
Alan DuckTechnical DirectorAuthor Commented:
SBS2008 in this case
Cris HannaSr IT Support EngineerCommented:
This blog article from the Microsoft SBS team will explain how to create a new self signed cert using the wizard in the SBS Console and then how to distribute the cert for external users

https://blogs.technet.microsoft.com/sbs/2008/09/30/how-do-i-distribute-the-sbs-2008-self-signed-ssl-certificate-to-my-users/
Alan DuckTechnical DirectorAuthor Commented:
I have read this article only talks on how to distribute the certificate, , I got the Certificate created just need to certify them using CA
Cris HannaSr IT Support EngineerCommented:
You might have skipped over the part that says...."create a new self-signed SSL certificate through the Internet Address Management Wizard (IAMW)"   The Internet Address Management Wizard (IAMW) is found on the Getting Started page of the SBS 2008 Console
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.