Can not get machine certificate from CA on Windows Server 2008

I have CA on Windows Server 2008 Standard.
When I try to get machine certificate thru MMC certificates snap-in I got
error:
The certificate request failed because of one of the following conditions:
- The certificate request was submitted to a Certification Authority (CA)
that is not started
- You do not have the permissions to request certificates from the available
CAs

Also there is error in system log:
Source: DCOM
Event ID: 10006
DCOM got error "General access denied error " from the computer <CA server
name> when attempting to activate the server:
{D99E6E74-FC88-11D0-B498-00A0C90312F3}


When I request user certificate it's ok.

Hi!
Any ideas?

"mace" wrote:

> I have CA on Windows Server 2008 Standard.
> When I try to get machine certificate thru MMC certificates snap-in I got
> error:
> The certificate request failed because of one of the following conditions:
> - The certificate request was submitted to a Certification Authority (CA)
> that is not started
> - You do not have the permissions to request certificates from the available
> CAs
>
> Also there is error in system log:
> Source: DCOM
> Event ID: 10006
> DCOM got error "General access denied error " from the computer <CA server
> name> when attempting to activate the server:
> {D99E6E74-FC88-11D0-B498-00A0C90312F3}
>
>
> When I request user certificate it's ok.
>

Hello mace,

What about the CA service, is it started and set to automatic? What account
are you using? Any additional errors about "Autoenrollment"

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have CA on Windows Server 2008 Standard.
> When I try to get machine certificate thru MMC certificates snap-in I
> got
> error:
> The certificate request failed because of one of the following
> conditions:
> - The certificate request was submitted to a Certification Authority
> (CA)
> that is not started
> - You do not have the permissions to request certificates from the
> available
> CAs
> Also there is error in system log:
> Source: DCOM
> Event ID: 10006
> DCOM got error "General access denied error " from the computer <CA
> server
name>> when attempting to activate the server:
name>>
> {D99E6E74-FC88-11D0-B498-00A0C90312F3}
>
> When I request user certificate it's ok.
>

mace wrote:
> Hi!
> Any ideas?
>
> "mace" wrote:
>
>> I have CA on Windows Server 2008 Standard.
>> When I try to get machine certificate thru MMC certificates snap-in I got
>> error:
>> The certificate request failed because of one of the following conditions:
>> - The certificate request was submitted to a Certification Authority (CA)
>> that is not started
>> - You do not have the permissions to request certificates from the available
>> CAs
>>
>> Also there is error in system log:
>> Source: DCOM
>> Event ID: 10006
>> DCOM got error "General access denied error " from the computer <CA server
>> name> when attempting to activate the server:
>> {D99E6E74-FC88-11D0-B498-00A0C90312F3}
>>
>>
>> When I request user certificate it's ok.
>>

Hi,

you could check out this article http://support.microsoft.com/kb/927066


Regards

Martin


--
Replace nospam with google's mail for e-mail communication