|
Posted by Brian Komar \(MVP\) on April 28, 2008, 5:11 am
If you were Registered and logged in, you could reply and use other advanced thread options
The PC's DNS name attribute is empty, and the CA is unable to populate the
SAN with the DNS name
Input the DNS name, and the request should succeed.
Brian
> Sorry that I wasn't clear.
> I was following the doc Ethernet Switch Access with IAS :
>
http://technet2.microsoft.com/windowsserver/en/library/f2b766ef-bc4f-4765-b105-fe0b538caf191033.mspx
>
> Here I saw that I needed configure automatic certificate allocation from
> an
> enterprise CA :
>
http://technet2.microsoft.com/windowsserver/en/library/9fc9ac6f-78c0-4f50-9c15-4beecf5129161033.mspx?mfr=true
>
> Although I followed the procedure and got no error message, the problem is
> that my client pc doesn't get the certificate.
>
> I open the Certificate Authority, go to failed requests and get this
> message:
> 0x8009480f error : the dns name is unavailable and cannot be added to the
> subject alternate name : denied by policy module
>
> resubmit failed too.
>
> I hope this helps.
>
>
> "Brian Komar (MVP)" wrote:
>
>> I have no idea what you are asking
>> I need more details
>> Brian
>>
>> > Certification Authority 0x8009480f error : the dns name is unavailable
>> > and
>> > cannot b e added to the subjectalternatename.
>> > This error I get all the time when automatic certificate allocation
>> > wants
>> > to
>> > give a certificate to a domain pc.
>> > I have a W2K3 domain, the pc is W2K SP4.
>> > in the logs there is nothing wrong with DNS.
>> > Tried to kick te pc out of the domain and back, nothing changed.
>> > Removed CA and reinstalled, nothing changed.
>> > Something strange when I follow procedure for configuring aut. cert.
>> > alloc.,
>> > after selecting the computer out of the templates, I won't get the
>> > enterprise
>> > ROOT CA, just window with name and computer.
>> > Is this the cause of the above problem? What can I do to solve this
>> > problem.
>> >
>> > Thank you.
>> >
>>
>>
| 
XML site map