CertSrv HTTP Authentication Windows Server 2008 R2

hi,

i'm new forum apologize if thread in wrong section.

i have ad cs installed on member server of domain, i've got configured standalone root certificate authority web enrollment installed. i've got ad cs installed purpose of using certificates ikev2 vpn i've got working properly.

the problem i'm having that, i'm trying add https bindings certsrv , certenrol because want request web browser certificate.

when have gone https://myip/certsrv no page can not displayed because haven't got bindings.

however when go http://myip/certsrv , click on request certificate web browser certificate receive error message "in order complete certificate enrollment, web site ca must configured use https authentication."

i understand need configure authentication. when try add ssl bindings default website has certsrv , certenrol sub sites receive error "the binding being used product other iis. if continue might overwrite existing certificate ip address:port combination. want use binding anyway?"

i've run following commands in command prompt.

netstat -an | find ":443" | find "listening"

netstat -anb

the results were:

netstat -an | find ":443" | find "listening"

tcp     0.0.0.0:443     0.0.0.0:0     listening

tcp     [::]:443           [::]:0           listening

netstat -anb

tcp     0.0.0.0:443      0.0.0.0:0      listening

can not obtain ownership information.

could have rras setup on same server?

is there way can fix , not affect vpn/rras on same server adcs?

thanks

rach

 

 

you can create https binding port (say, 444). , when access web site type this: https://myip:444/certsrv

 

---

my weblog: http://en-us.sysadmins.lv
powershell pki module: http://pspki.codeplex.com
windows pki reference: on technet wiki

Windows Server  >  Security