troubleshooting Question

Problem renewing a certificate

Avatar of MikeBroderick
MikeBroderick asked on
Exchange* certificate services* active directory certificate serviceActive DirectorySecurity
3 Comments1 Solution34 ViewsLast Modified:
I need to renew my exchange server's iis certificate. I generate the request on the exchange server. I bring up the web page xxx.xxx.xxx.xxx/CertSrv and click Request a Certificate.  I get the message:

No certificate templates could be found. You do not have permission to request a certificate from this CA, or an error occurred while accessing the Active Directory.

Per internet searches, I found the following suggestion:

You will need to view the Active Directory dNSHostName attribute on the following object: pkiEnrollmentService. To find this object, check the following locations:
CN=CertificateServer,CN=Enrollment Services,CN=Public Key
Services,CN=Services,CN=Configuration,DC=MyDomain,DC=com
To be able to see the dNSHostName attribute, you will have to use ADSIEdit.msc or LDP.exe.

When I try ADSI or LPD, I do not see any of the above. My ASDI shows:

Name      Class      Distinguished Name
CN=Builtin      builtinDomain      CN=Builtin,DC=MyDomain,DC=local
CN=Computers      container      CN=Computers,DC=MyDomain,DC=local
OU=Domain Controllers      organizationalUnit      OU=Domain Controllers,DC=MyDomain,DC=local
CN=ForeignSecurityPrincipals      container      CN=ForeignSecurityPrincipals,DC=MyDomain,DC=local
CN=LostAndFound      lostAndFound      CN=LostAndFound,DC=MyDomain,DC=local
CN=Managed Service Accounts      container      CN=Managed Service Accounts,DC=MyDomain,DC=local
OU=Microsoft Exchange Security Groups      organizationalUnit      OU=Microsoft Exchange Security Groups,DC=MyDomain,DC=local
CN=Microsoft Exchange System Objects      msExchSystemObjectsContainer      CN=Microsoft Exchange System Objects,DC=MyDomain,DC=local
OU=MyBusiness      organizationalUnit      OU=MyBusiness,DC=MyDomain,DC=local
CN=NTDS Quotas      msDS-QuotaContainer      CN=NTDS Quotas,DC=MyDomain,DC=local
CN=Program Data      container      CN=Program Data,DC=MyDomain,DC=local
CN=System      container      CN=System,DC=MyDomain,DC=local
CN=TPM Devices      msTPM-InformationObjectsContainer      CN=TPM Devices,DC=MyDomain,DC=local
CN=Users      container      CN=Users,DC=MyDomain,DC=local
CN=Infrastructure      infrastructureUpdate      CN=Infrastructure,DC=MyDomain,DC=local

Am I missing something?
ASKER CERTIFIED SOLUTION
Ian Pattison
Independent IT Consultant

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 3 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 3 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros