CA moved to another server - now errors

Hi Experts,

we have moved our CA to another server.
Now I cannot open CERTSRV to sign a request.
Can you help me to find the error ?




Modul

IsapiModule



Benachrichtigung

ExecuteRequestHandler



Handler

ASPClassic



Fehlercode

0x800700aa





Angeforderte URL

http://s02dc:80/certsrv/Default.asp



Physikalischer Pfad

C:\Windows\system32\CertSrv\de-DE\Default.asp



Anmeldemethode

Negotiate
Eprs_AdminSystem ArchitectAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
Advertise Here
 
No MoreConnect With a Mentor Commented:
Never mind that,

Look at this link , I believe this could sort you out
https://blogs.iis.net/webtopics/asp-500-error-and-error-code-0x800700aa-when-browsing-a-simple-asp-page
0
 
No MoreCommented:
Did you export CA database and export CA configuration from registry and then uninstall CA on old server ?

Did you then install CA on new server and import database and registry configuration to new server ?
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
Hello,

yes we have exported the REG settings and the DB.
From the old server it is uninstalled
On the new server it is installed and REG settings imported as well the DB.
0
Building an Effective Phishing Protection Program

Join Director of Product Management Todd OBoyle on April 26th as he covers the key elements of a phishing protection program. Whether you’re an old hat at phishing education or considering starting a program -- we'll discuss critical components that should be in any program.

Register Today!
 
No MoreCommented:
I forgot to mention , Do you have same name of the server ?



CA server 2003 to 2008 ?
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
no its another name.
0
 
No MoreCommented:
What I would remember, It has to be same name to get it to work

old server name move to new server
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
but this is not possible.
I have another server with another name and I cannot change it.

So when I export the DB and the regisrty, why I need the same name ?
This makes no sense.
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
I dont use McAffee, so this link is obsolete.
0
 
No MoreCommented:
Read that article, it clearly tells you how to troubleshoot this issue
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
I have read all,  but this will not solve my case.
0
 
David Johnson, CD, MVPOwnerCommented:
1. Did you create a capolicy.inf and put it in your windows folder.

More than likely your CA configuration is incorrect and pointing to the OLD servername.
0
 
No MoreCommented:
@David
That was needed for 2003 server not 2008 what I would remember
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
The regsettings are ok.
I dont have a ca policy....whats this ?
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
Sorry your link was right.
In the past we had also McAffee.
Now the certsrv website works again.
0
 
No MoreCommented:
So, I was right ?
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
yes the IE starts again but still I cannot enter the CSR to get my certificate.

I get this error:
cert-error.JPG
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
on EXCH2013 I have created a new cert request.
But when I enter this reqest to our CA I get this error:

WIN32: 13 Error
SOmething with wrong data.

My CA is running on WIN2008, is this a problem ?
0
 
No MoreCommented:
Open certification authority and check if you have any certificates from old server there ,as they need to be revoked and new cert reissued from new CA

Also restart CA server

You need to check that you have correct CA certs on servers

Do you have public cert for your exchange server ?
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
it was something with our old security system from Kaspersky.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.