Users cannot download certificate from certsrv

Discussion in 'Server Security' started by apo, Sep 13, 2004.

  1. apo

    apo Guest


    I have an enterprise CA on Windows Server 2003.
    Some XP & W2K(SP4) client cannot download any certificate with the
    following error message: "The
    proper version of the activex control failed to download and install."

    I checked the Knowledge Base and it said you need to be a local
    administrator on the machine you are installing the certificate on.
    I AM.

    It also said you need to have the web site for the certsrv in your
    Trusted Sites list.
    IT IS.

    I am at a loss as to what else to do.

    Any clue ?


    apo, Sep 13, 2004
    1. Advertisements

  2. Is this a smart card based enrollment?

    My guess is that you don't have the correct version of an ActiveX control
    installed on your machine. If you are a local administrator then this should
    be downloaded and installed by the web page (after necessary prompts).

    I think you already checked this:;en-us;330211

    Make sure you follow the step:
    In the Add this Web site to this zone box, type the address for the
    Microsoft Windows Certificate Server. If the Microsoft Windows Certificate
    Server (or your computer) is not configured to use SSL, click to clear the
    Require server verification (https:) for all sites in this zone check box.

    Windows XP SP1+ and IE 6 SP1 should already have the control.
    Anand Abhyankar [MS], Sep 13, 2004
    1. Advertisements

  3. apo

    apo Guest

    Actually it is used in a user certificate enrollment for VPN connections
    Yes, I checked the kb article 330211... but actually I did "trust" the
    MS Certificate server (which use SSL by the way !)

    When you said "You don't have the correct version of an ActiveX...". The
    story is I come up the certsrv page and on "Request a certificate" an
    automatic ActiveX download is launched. The one which failed with the
    "The proper version of the activex control failed to download and
    install." error message. How can I determine the wrong ActiveX and where
    shoud I find the right one ?

    Thanks for any further help.

    apo, Sep 13, 2004
  4. Shawn Corey [MSFT], Sep 14, 2004
  5. apo

    apo Guest

    That was it !

    Great ! Thanks a million for the help.

    apo, Sep 14, 2004
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.