Microsoft KB Archive/276359

= Error When Requesting Client Authentication Certificate =

Article ID: 276359

Article Last Modified on 1/29/2007

-

APPLIES TO


 * Microsoft Internet Explorer 5.0
 * Microsoft Internet Explorer 4.01 Service Pack 1
 * Microsoft Internet Explorer 4.01 Service Pack 2
 * Microsoft Internet Explorer 4.0 128-Bit Edition
 * Microsoft Internet Explorer 5.0
 * Microsoft Internet Explorer 4.01 Service Pack 2
 * Microsoft Internet Explorer 5.0
 * Microsoft Internet Explorer 4.01 Service Pack 1
 * Microsoft Internet Explorer 4.01 Service Pack 2
 * Microsoft Internet Explorer 4.0 128-Bit Edition
 * Microsoft Windows 98 Second Edition

-



This article was previously published under Q276359



SYMPTOMS
When you request a Client Authentication Certificate on the Certificate Enrollment form from Microsoft Certificate Server, you may receive one of the following error messages:

Internet Explorer Script Error

Line: 77 or 78

Char 7

Error: Object does not support this property or method

-or-

Certificate Server

You have submitted an empty string which indicates that an error has occurred on your machine. Please verify the data you have submitted is valid and that a PKCS10 is being correctly generated by your machine.



CAUSE
This behavior may occur because the version of the Xenroll.dll file used on the client computer is earlier than version 5.131.2090.1.



RESOLUTION
To resolve this behavior on a Microsoft Windows 95-based computer, a Microsoft Windows 98-based computer, or a Microsoft Windows 98 Second Edition-based computer, install Microsoft Internet Explorer 5.01 or later, which includes an updated version of the Xenroll.dll file.

On a Microsoft Windows NT 4.0-based computer, install either Internet Explorer version 5.01 or later, or Windows NT 4.0 Service Pack 6a.

Internet Explorer can be downloaded from the following Microsoft Web site:

http://www.microsoft.com/windows/ie



WORKAROUND
If the preceding resolution is not possible, the following workaround can be performed on the server:  Verify that the Xenroll.dll file is version 5.131.2090.1 or later.For additional information about the Xenroll.dll file, click the article number below to view the article in the Microsoft Knowledge Base:

223034 Client Authentication Certificate Request Fails

 Ensure that the CertControl virtual directory is located under the root Web site (this may or may not be the default Web site). It should be on the same level as the CertSrv virtual directory. Ensure that it is mapped to the Winnt\System32\CertSrv\CertControl folder. Use the Adsutil.vbs script file, the Metaedit.exe program, or the Mdutil tool to confirm that the CertControl virtual directory does not use the Secure Socket Layer (SSL) protocol or requires 128-bit SSL. Quit and start the Web service. The Ceenroll.asp page now functions.

Keywords: kberrmsg kbenv kbprb KB276359

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.