Certsrv not giving out UC/SAN certificates in server 2012

Hello
I'm trying to use the certsrv utility to publish certificates for a fictitious set of testing domains I have. Certsrv is returning certificates, but for some reason they will not include a SAN field. I feel like the problem is that I missed a
check box or setting somewhere, because these exact instructions will work in a my classmates environment.
I also used Certutil to set validity and renewal to 75 years, just to be safe
These are the steps:
Open IIS
Create Certificate request
Fill in distinguished name properties (Are any of these, other than CN, required?)
Microsoft RSA Cryptographic Provider
2048 bit length
Save as: SAN request.csr
Browse to http://localhost/certserv
request a certificate
Advanced request
Submit a request using base 64 file
Copy+Paste from "SAN request.csr" to the certificate request field
Certificate Template: Web Server
Additional Attributes: SAN:dns=pr.droids.com&finance.droids.com&manufacturing.droids.com
Submit
Download Certificate (not Certificate Chain)
Save as: SAN.cer
Back to IIS Manager
Complete a certificate request
Friendly name: SAN
Store: Personal
This all runs fine, the certificate shows up, but when viewed, the SAN field is missing. Is there something in MMC that needs to be changed? Or an I just forgetting something?

Try to run there commands in powershell on server
  PS
C:\> certutil.exe
-setreg ca\ValidityPeriodUnits 75
    PS C:\> certutil.exe
-setreg ca\RenewalValidityPeriodUnits 75
    PS C:\> certutil.exe
-setreg ca\RenewalValidityPeriod Years
    PS C:\> certutil.exe
-setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2
        PS
C:\> Restart-Service CertSvc

Similar Messages

I don't understand the thing you call live bookmarks never used it, and most forums I have used notify VIA E-mail not giving out my E-mail address information when a reply has been made to the thread in question.

So how do I get notified of updates in this forum? As I said: I don't understand the thing you call LIVE BOOKMARKS I have never used them, and most forums I have used notify VIA E-mail not giving out my E-mail address, or other private information when a reply has been made to the thread in question, so how do I get notified of updates in this forum? I have seen no normal options for setting my viewing preferences used for this forum. Thank You.

Thanks for your reply via email/msg. He wrote:
If you are interested in the actual design data for the Xeon processor, go to the Intel site and the actual CPU part numbers are:
Xeon 4 core - E5.1620v2
Xeon 6 core - E5.1650v2
Xeon 8 core - E5.1680v2
Xeon 12 core - E5.2697v2
I read that the CPU is easy to swap out but am sure something goes wrong at a certain point - even if solderedon they make material to absorb the solder, making your work area VERY clean.
My Question now is this, get an 8 core, then replace with 2 3.7 QUAD CHIPS, what would happen?
I also noticed that the 8 core Mac Pro is 3.0 when in fact they do have a 3.4 8 core chip, so 2 =16? Or if correct, wouldn't you be able to replace a QUAD CHIP WITH THAT? I;M SURE THEY ARE UO TO SOMETHING AS 1) WE HAVE SEEN NO AUDIO FPU OR PERHAPS I SHOULD CHECK OUT PC MAKERS WINDOWS machines for Sisoft Sandra "B-E-N-C-H-M-A-R-K-S" -
SOMETHINGS UP AND AM SURE WE'LL ALL BE PLEASED, AS the mac pro was announced Last year, barely made the December mark, then pushed to January, then February and now April.
Would rather wait and have it done correct than released to early only to have it benchmarked in audio and found to be slower in a few areas- - - the logical part of my brain is wondering what else I would have to swap out as I am sure it would run, and fine for a while, then, poof....
PEACE===AM SURE APPLE WILL BLOW US AWAY - they have to figure out how to increase the power for 150 watts or make the GPU work which in regard to FPU, I thought was NVIDIA?

WRT310N - Wireless not giving out IP addresses - Any hope?

I have a WRT310N. For wired ethernet there is no problem whatsoever but when I try to connect wireless laptops, cameras, etc. I can only do it 2 out of 10 times.
I usually get a limited connectivity error. It seems like the unit isn't giving out IP addresses over wireless. After rebooting and/or resetting it will sometimes work for a bit. There seems to be quite a few posts that are like mine so I don't have a good feeling about there being a solution to this problem.
Is there?
So I can get some work done, this morning I pulled the WRT310N and put the old WRT54G back on because it works great.

Upgrade/reflash the firmware for your router, reset the router and reconfigure. This should solve your problem.

DirectAccess Client not connecting without error code on Windows Server 2012 R2 and Windows 8.1

Hello,
we are currently migrating from Windows Server 2012 to 2012 R2 and are not able to get the new Direct Access Service up and running. Our goal is to establish DirectAccess connection for a handful of clients using the IPHTTPS-adapter on the default port 443.
Errors:
There is actually no error showing up. It seems the infrastructure tunnel cannot be created but none of the IPv6-transition adapters is connecting (teredo and 6-to-4 are down) and the IPHTTPs adapter gives no informations about a problem:
>Get-DAConnectionStatus
Status : Error
Substatus : CouldNotContactDirectAccessServer
>Get-NetIPHttpsState
LastErrorCode : 0x0
InterfaceStatus : Failed to connect to the IPHTTPS server; waiting to reconnect
Setup:
Our setup is a virtualized Windows Server 2012 R2 Standard running on Hyper-V. It is located behind a NAT having the Port 443 mapped to the server. The only role installed after the basic install is RRAS including DirectAccess and VPN. The assistants completed
successfully (running the configuration for DirectAccess and VPN). Operation Status says everything is green und working (for multiple days in the meanwhile). A previous direct access installation (on a different machine running Windows Server 2012) has
been removed before installing the new server. The new installation is using a different router, so this might also be the cause of a problem.
The client is a Windows 8.1 notebook located outside the company network accessing the internet through another NAT-device. The client has been able to connect to the previous DirectAccess setup but has never been able to establish a connection after the
setup of the new Direct Access server. The device has no outbound constraints concerning the NAT-device and is only running the integrated Windows Firewall.
Diagnosis:
So far I've done some basic DNS and connectivity checks. The DNS-name can be resolved correctly and the router even responds to pings. The port forward is working and HTTPs connections are generally possible (temporarily routed the port to
access the NLS-Website located on the server, which worked fine).
Network monitor shows that both computers are communicating, traffic on the expected Port 443 is incoming on the server and responses from the server reach the client.
Opening the IPHTTPs-url and in an endless page load. Sometime the browser page closes but I've never seen any result. Using telnet on the port shows that the server is accepting connections. I've even build a small test application that does a GET-Request
on the URL returning HTTP-200 and no content.
I'm currently running out of ideas what to do and since no error occurs this is kind of a bit frustrating. Any help appreciated.
Regards
Matthias

Hi,
In addition, have you disabled the DA client components on the DA client? If no, please also check
the settings on the Name Resolution Policy Table.
More information:
DirectAccess
Client Location Awareness – NRPT Name Resolution
In addition, error 0x4C9 means the remote computer refused the network connection. It may be due to the invalid
registry or corrupt drivers. For more detailed information, please refer to the link below:
Error 1225 - Error Code 0x4C9
Note:
Microsoft is providing this information as a convenience to you. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best regards,
Susie

Not able to install IIS on Windows Server 2012

I am unable to install IIS on Windows Server 2012. I get the error as shown in the below screenshot. Error code is 0x800f0922. I did RestoreHealth but that has not helped. Any help will be appreciated.

Hi Yogesh,
Just last week was installing IIS on W12R2 server and got stuck and found easy way of installing this as follow.
when you start installing IIS and at the last step as i marked on red square confirmation. there you find
export configuration settings..go to and export it to C drive and open Powershell by right clicking as open as administrator and run this from Powershell and it will install successfully.
Please let me know if you are facing any issue, since this way it has to work.
OR if you it already worked let me know or mark as correct.
Regards
Raj Navalgund
ADS/DNS/DHCP/RIS/GROUP POLICY/PowerShell/VMware/Esxi/Storage.

Error: Could not open key: UNKNOWN\Components in Windows Server 2012 R2

Hi,
I am trying to install an MSI where i am getting the below error
..\MSI\CHIP_MAPS.msi: Could not open key: UNKNOWN\Components\F5C1BE1268054884D9261E148691452A\34DBF3FA04D67B443A8EE069E02E418B. Verify that you have sufficient access to that key, or contact your support personnel.
I was able to fix this in Windows Server 2008 R2 . With ine instructions provided here
http://www.okino.com/conv/changing_windows_registry_permissions.htm
However In Windows Server 2012 or R2 i followed the below steps.
1. Regedit
2.
Navigate to the following parent container:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components
3. Replace all child object permissions with inheritable permissions from this object in permissions tab
4. I don't find the owner tab
Please help me asap
Thanks
Sreeram

then add the user name as new owner
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Could not find value to a key (sql server 2012)

hi guys . look i have problem here. i already safely installed sql server 2012 64 bit . but when come to sql managament studio , it always appear error "could not write a value to a key " something like that. plus i already run it as administator
and already set HKEY to full control. yet it still appear the same. someone please help me .

hi guys . look i have problem here. i already safely installed sql server 2012 64 bit . but when come to sql managament studio , it always appear error "could not write a value to a key " something like that. plus i already run it as administator
and already set HKEY to full control. yet it still appear the same. someone please help me .
Hi,
Was your error like Could not write value to key \SOFTWARE. Error code: 1406 if so this is Not a problem with SQL server possible causes for this kind of issue is
1. Antivrus running. Please stop antivirus for period of install
2. Some kind or registry scanner software, adware, some scanning software running on your windows machine which is blocking access to registry. Below link has same issue see answer given by Michpol
http://social.technet.microsoft.com/Forums/sqlserver/en-US/41dec503-ce0a-40e1-ae5f-363452890d48/sql-server-management-tools-could-not-write-value-to-key-software-error-code-1406?forum=sqltools
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it.
My TechNet Wiki Articles

Windows could not update the computer's boot configuration Server 2012

I'm trying to install Windows Server 2012 on another partition (V:) that I create directly from Disk Management. After I create it, I do a simple format of the partition.
Next, I try to Install Windows Server 2012, directly on the recent partition, after the setup is completed, Windows Server 2012 boots to the Getting the devices
ready section, but stops and throws me this error.
Windows could not update the computer's boot configuration
After that the computer, restarts and it goes on and on unable to create a multi-boot environment. What's killing me is that I have done this on the past like 10 times and never run to this problem.
I'm running Windows 7 Home Premium on an ASUS K45 64 bit.

Hi,
You can try adding a new boot entry by using bcdedit tool:
Adding Boot Entries
http://msdn.microsoft.com/en-in/library/windows/hardware/ff541231(v=vs.85).aspx
Or you can build a usb-bootable deivce to install the image:
Walkthrough: Create a Bootable Windows PE RAM Disk on a USB Flash Disk
http://technet.microsoft.com/en-us/library/dd744530(v=ws.10).aspx
Hope this helps.

DHCP Server not giving out IP Address to APPLE iPhone

Hi, First off, I hope this is the correct forum....
A little background, I have a very nice 16GB 3G iPhone (from Apple of course). It has no problem connecting to my wireless access point (cisco 1240). I have an old windows server that I can turn on as a dhcp server and it gets an address back right away, however my mac server (10.5) will no give it an address and I do not understand why. Here is the log.....
Mar 16 19:06:37 macserver bootpd[37021]: server starting
Mar 16 19:06:37 macserver bootpd[37021]: server name macserver.schmittg.com
Mar 16 19:06:37 macserver bootpd[37021]: interface en0: ip 192.168.1.75 mask 255.255.255.0
Mar 16 19:06:37 macserver bootpd[37021]: interface en2: ip 10.211.55.2 mask 255.255.255.0
Mar 16 19:06:37 macserver bootpd[37021]: interface en3: ip 10.37.129.2 mask 255.255.255.0
Mar 16 19:06:49 macserver bootpd[37021]: DHCP DISCOVER [en0]: 1,0:21:e9:5:d3:de <iPhone-5>
Mar 16 19:06:49 macserver bootpd[37021]: service time 0.008083 seconds
Mar 16 19:08:11 macserver bootpd[37021]: DHCP DISCOVER [en0]: 1,0:21:e9:5:d3:de <iPhone-5>
Mar 16 19:08:11 macserver bootpd[37021]: service time 0.003807 seconds
Mar 16 19:08:12 macserver bootpd[37021]: DHCP DISCOVER [en0]: 1,0:21:e9:5:d3:de <iPhone-5>
Mar 16 19:08:12 macserver bootpd[37021]: service time 0.000683 seconds
Mar 16 19:08:13 macserver bootpd[37021]: DHCP REQUEST [en0]: 1,0:21:e9:5:d3:de <iPhone-5>
Mar 16 19:08:13 macserver bootpd[37021]: service time 0.001844 seconds
Mar 16 19:08:24 macserver bootpd[37021]: DHCP DISCOVER [en0]: 1,0:21:e9:5:d3:de <iPhone-5>
Mar 16 19:08:24 macserver bootpd[37021]: service time 0.000587 seconds
Mar 16 19:08:25 macserver bootpd[37021]: DHCP REQUEST [en0]: 1,0:21:e9:5:d3:de <iPhone-5>
Mar 16 19:08:25 macserver bootpd[37021]: service time 0.000409 seconds
Mar 16 19:08:27 macserver bootpd[37021]: DHCP DECLINE [en0]: 1,0:21:e9:5:d3:de
Mar 16 19:08:27 macserver bootpd[37021]: dhcpd: host 1,0:21:e9:5:d3:de declines IP 192.168.1.227 from server 192.168.1.1
Mar 16 19:08:27 macserver bootpd[37021]: service time 0.001994 seconds
What is wrong?
Thanks!

I am having a similar problem:
---------------- Client Request --------------------
op = BOOTREQUEST
htype = 1
flags = 0
hlen = 6
hops = 0
xid = 20714
secs = 27
ciaddr = 0.0.0.0
yiaddr = 0.0.0.0
siaddr = 0.0.0.0
giaddr = 0.0.0.0
chaddr = 0:4:13:2a:2f:ed
sname =
file =
options:
Options count is 9
dhcpmessagetype (uint8): REQUEST 0x3
maxdhcp_messagesize (uint16): 0x224
requestedipaddress (ip): 192.168.1.66
server_identifier (ip): 192.168.1.200
host_name (string): m3-0004132A2FED
parameterrequestlist (uint8_mult): {0x1, 0x3, 0x6, 0xf, 0x21, 0x42, 0xa0}
vendorclassidentifier (string): snom-m3-SIP/01.25//10-Mar-09 16:36
client_identifier (uint8_mult): {0x1, 0x0, 0x4, 0x13, 0x2a, 0x2f, 0xed}
end (none):
bootpd[3138]: DHCP REQUEST [en1]: 1,0:4:13:2a:2f:ed <m3-0004132A2FED>
SELECT
state=SELECT
Sending: DHCP ACK (size 300)
bootpd[3138]: replying to 192.168.1.66
=================== Server Reply =====================
op = BOOTREPLY
htype = 1
flags = 0
hlen = 6
hops = 0
xid = 20714
secs = 0
ciaddr = 0.0.0.0
yiaddr = 192.168.1.66
siaddr = 192.168.1.200
giaddr = 0.0.0.0
chaddr = 0:4:13:2a:2f:ed
sname = ryan-perrys-computer.local
file =
options:
Options count is 8
dhcpmessagetype (uint8): ACK 0x5
server_identifier (ip): 192.168.1.200
lease_time (uint32): 0xdec
subnet_mask (ip): 255.255.255.0
router (ip_mult): {192.168.1.1}
domainnameserver (ip_mult): {208.67.222.222, 208.67.220.220}
domain_name (string): wha
end (none):
bootpd[3138]: ACK sent <no hostname> 192.168.1.66 pktsize 300
bootpd[3138]: service time 0.001879 seconds
destination address 255.255.255.255
---------------- Client Request --------------------
op = BOOTREQUEST
htype = 1
flags = 0
hlen = 6
hops = 0
xid = 11587
secs = 27
ciaddr = 0.0.0.0
yiaddr = 0.0.0.0
siaddr = 0.0.0.0
giaddr = 0.0.0.0
chaddr = 0:4:13:2a:2f:ed
sname =
file =
options:
Options count is 4
dhcpmessagetype (uint8): DECLINE 0x4
server_identifier (ip): 192.168.1.200
requestedipaddress (ip): 192.168.1.66
end (none):
bootpd[3138]: DHCP DECLINE [en1]: 1,0:4:13:2a:2f:ed
bootpd[3138]: dhcpd: IP 192.168.1.66 declined by 1,0:4:13:2a:2f:ed
marking host 192.168.1.66 as declined
state=<none>
bootpd[3138]: service time 0.001143 seconds
destination address 255.255.255.255

WRT54gr not giving out ip addresses

I have a WRT54GR that seems to stall after running a couple of days. After about 3 - 5 days of running my PC's can see the wireless network, connect to it, but will not be given an IP address. If I reset the WR54gR the PC or laptop get's an IP address just fine. Any thoughts?
It has the latest firmware and YES, I have re-applied the latest firmware to this router.

Hi , try a few changes in the wireless settings.....from a hardwired PC access your router using http://192.168.1.1 "admin" is the password.....slect the wireless section and select channel 11....save settings....then go to the advanced wireless settings and reduce the beacon interval to 50 and reduce the RTS and fragmentation threshold by 40 each..
re-connect to your wireless network and observe.

DHCP not giving out adresses

Hi there,
just upgraded from Lion Server to ML Server. I found that everything is runnign quite smooth here (OD Master with 800+ users, NetInstall, etc etc), but I have problems with my DHCP Service:
As is written in Apple's KB Article, all the config files with my setup from Lion Server are still there and the service also is up and running, but my clients just won't get IPs and settings via DHCP. I also thought about firewall issues, but just as with DHCP, these settings were kept and are up and running. I've also found the tutorial from Krypted.com and read the other posts, but I really can't find the problem's source.
Anybody here with similar problems?
best whishes,
Christian

Thanks man! That's been it. Who would guess, that although they transfer all the settings when upgrading, the server is disabled

Server 2012r2 KMS host will not accept any keys except that for Server 2012

I am attempting to upgrade our infrastructure to server 2012r2 from 2008r2. I've have run into issues with the KMS volume activation for our clients.
I've installed the Volume Activation Services Role and added a 2012r2 KMS key fine. Everything looks to be setup OK in DNS etc. However when I try and install additional KMS keys for Office 2010/13 Windows 7/8 the wizard tells me the key is invalid.
"Invalid product key or license mismatch"
I've tried installing the Key Host management hot fixes but these just report not for this operating system. I guess am I am missing something or misunderstanding but what?
Any help appreciated, I don't want to have to leave the 2008r2 running just for licensing.

OK worked it out.......
The 2012 key will activate windows 7/8 etc
Office 2010 needed this update to the server
http://www.microsoft.com/en-us/download/confirmation.aspx?id=25095
Office 2013 needs this update
http://www.microsoft.com/en-us/download/details.aspx?id=35584
All working now.......

Use Pop-up Blocker disabled policy not working via IE Administrative Templates on Server 2012.

I'm finding I can't make any adjustments to the pop-up blocker setting at all.
I've set Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone and the option in there for "Use Pop-up Blocker" to be disabled. As for trusted sites we want to allow pop ups. however after saving this and using GPupdate /force
from a command line and restarting the policy is not applying.
We also tried adding the sites in question to Internet Explorer/Pop-Up Allow List when we found that the trusted sites zone setting was not working but it also does not work that way either.

Hi,
You have to configure Pop-up blocker settings both in Trusted Sites Zone and Intranet Zone.
Please refer the below thread on similar issue,
http://social.technet.microsoft.com/Forums/windowsserver/en-US/c1c0cd21-ebd7-42c8-81af-cc32296834a9/popup-blocker-group-policy?forum=winserverGP
Regards,
Gopi
JiJi
Technologies

Remote Desktop Certificate Error - Server 2012 Essentials

My remote desktop connection was working fine until the operating system installed some recent updates automatically. I had everything set up, and the certificate was installed and working fine and had no issues getting to my remote computer. Recently when
I log into my remote web access and try to connect to any of the computers on the list I get an "Remote Desktop Connection" error. "Your computer can't connect to the remote computer because no certificate was configured to us the Remote
Desktop Gateway server." Like I said the certificate was installed and working fine the other day. Any insight is appreciate. Thanks

Hi ChrisCJK,
Based on the error message, please refer to the following operations and then check if can help you to solve
this issue.
Locate to Remote Desktop Services folder in Administrative Tools, then please open the
Remote Desktop Gateway Manager.
Right click server name and select
properties.
Select the SSL Certificate tab.
Then please click the “Import Certificate…” button.
Select the trusted certificate and click Import again. And then click Apply and OK.
If this issue still persists, please type the following command at the command prompt, then press ENTER:
netsh http show sslcert
Please check the value for
Certificate Store Name.
Meanwhile, please follow the path in Event Viewer:
Applications and Services Logs-> Microsoft-> Windows-> TerminalServices-Gateway folder. Please check if you can find any error message. Please also check other related TerminalServices folder if you can find some other clues. It will help us to go
further analysis.
Hope this helps.
Best regards,
Justin Gu

MRRL BACKGROUND NOT GIVING OUTPUT

Hi all
I created ZMRRL for value range etc in this program foreground working fine but in background not giving out put (spool) in SM37. its very urgent for me
                 submit RMMR1MRS
                        with B_BUKRS in gB_BUKRS
                        with B_WERKS in gB_WERKS
                        with B_BUDAT in gB_BUDAT
                        with B_MBLNR in gB_MBLNR
                        with B_MJAHR in gB_MJAHR
                        with B_LIFNR in gB_LIFNR
                        with B_EBELN in gB_EBELN
                        with B_EBELP in gB_EBELP
                        with ERSBA     = gERSBA
                        with B_XTEST   = gB_XTEST
                        with PA_VARIA = gP_VARIA
                        exporting list to memory
                        and return.
Im waiting for your answer

You put the results in memory not in spool. So that the calling program can read these.
The calling program must use FM 'LIST_FROM_MEMORY to recover the data.
If you have no caller, use TO SAP-SPOOL
regards.

Certsrv not giving out UC/SAN certificates in server 2012

Similar Messages

Maybe you are looking for