Microsoft KB Archive/279780

= Error Message: Windows Cannot Find a Certification Authority That Will Process This Request =

Article ID: 279780

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Windows 2000 Service Pack 1
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Service Pack 1

-



This article was previously published under Q279780



SYMPTOMS
When you are using the Certificates Microsoft Management Console (MMC) snap-in to request a new certificate, you receive the following error message:

Windows cannot find a certification authority that will process this request.



CAUSE
If there is a published Enterprise Certificate Authority (CA) in the Active Directory, then it is not trusted. The CA certificate is not installed in the Trusted Root store for the user, or for the local computer.



RESOLUTION
Using the Certificates MMC snap-in, verify that the CA certificate for Enterprise CA does not exist in either the user's Trusted Root store, or the local computer's Trusted Root store. If it does not, you can download the CA certificate in one of the following two:

Windows Enterprise Certificate Authorities automatically publish their CA certificates in the Enterprise Trusted Root store. Certificates in the Enterprise Trusted Root store are pushed out to all clients by way of the Security Group Policy. You can refresh the Security policy on the client by using the following command:

secedit /refreshpolicy machine_policy /enforce

As an alternative, follow these steps to download the CA certificate directly from the CA Web pages (assuming that IIS is installed):  Point the client's browser to:

http:// /certsrv

 Select Retrieve the CA certificate or certificate revocation list, and then click Next. Click Install this CA certification path.

Additional query words: certserv

Keywords: kbenv kbprb KB279780

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.