troubleshooting Question

Problem renewing a certificate

Avatar of MikeBroderick
MikeBroderick asked on
ExchangeSecurityActive Directory* certificate services* active directory certificate service
3 Comments1 Solution31 ViewsLast Modified:
I need to renew my exchange server's iis certificate. I generate the request on the exchange server. I bring up the web page xxx.xxx.xxx.xxx/CertSrv and click Request a Certificate.  I get the message:

No certificate templates could be found. You do not have permission to request a certificate from this CA, or an error occurred while accessing the Active Directory.

Per internet searches, I found the following suggestion:

You will need to view the Active Directory dNSHostName attribute on the following object: pkiEnrollmentService. To find this object, check the following locations:
CN=CertificateServer,CN=Enrollment Services,CN=Public Key
Services,CN=Services,CN=Configuration,DC=MyDomain,DC=com
To be able to see the dNSHostName attribute, you will have to use ADSIEdit.msc or LDP.exe.

When I try ADSI or LPD, I do not see any of the above. My ASDI shows:

Name      Class      Distinguished Name
CN=Builtin      builtinDomain      CN=Builtin,DC=MyDomain,DC=local
CN=Computers      container      CN=Computers,DC=MyDomain,DC=local
OU=Domain Controllers      organizationalUnit      OU=Domain Controllers,DC=MyDomain,DC=local
CN=ForeignSecurityPrincipals      container      CN=ForeignSecurityPrincipals,DC=MyDomain,DC=local
CN=LostAndFound      lostAndFound      CN=LostAndFound,DC=MyDomain,DC=local
CN=Managed Service Accounts      container      CN=Managed Service Accounts,DC=MyDomain,DC=local
OU=Microsoft Exchange Security Groups      organizationalUnit      OU=Microsoft Exchange Security Groups,DC=MyDomain,DC=local
CN=Microsoft Exchange System Objects      msExchSystemObjectsContainer      CN=Microsoft Exchange System Objects,DC=MyDomain,DC=local
OU=MyBusiness      organizationalUnit      OU=MyBusiness,DC=MyDomain,DC=local
CN=NTDS Quotas      msDS-QuotaContainer      CN=NTDS Quotas,DC=MyDomain,DC=local
CN=Program Data      container      CN=Program Data,DC=MyDomain,DC=local
CN=System      container      CN=System,DC=MyDomain,DC=local
CN=TPM Devices      msTPM-InformationObjectsContainer      CN=TPM Devices,DC=MyDomain,DC=local
CN=Users      container      CN=Users,DC=MyDomain,DC=local
CN=Infrastructure      infrastructureUpdate      CN=Infrastructure,DC=MyDomain,DC=local

Am I missing something?
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 3 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 3 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros