You receive an error message when you try to configure a new remote access policy in IAS on a Windows Server 2003-based computer (871222)


The information in this article applies to:

  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Web Edition

SYMPTOMS

When you try to configure a new remote access policy in Internet Authentication Service (IAS) on a Microsoft Windows Server 2003-based computer, you may receive the following error message:
A certificate could not be found that can be used with this Extensible Authentication Protocol.

CAUSE

This issue occurs if a server authentication certificate that is obtained from a stand-alone certification authority (CA) is configured with incorrect parameters.

RESOLUTION

To resolve this issue, make sure that the correct key option parameters are configured in the server authentication certificate. To do this, follow these steps:
  1. Start Microsoft Internet Explorer.
  2. On the Address bar, type http://Local Host/CertSrv, and then click Go.
  3. On the Welcome page, click Request a certificate under Select a task.
  4. On the Request a Certificate page, click Advanced certificate request.
  5. On the Advanced Certificate Request page, click Create and submit a request to this CA.
  6. Make sure that the correct parameters are configured under Key Options. To do this, follow these steps:
    1. Click Create New key set.
    2. In the CSP box, click Microsoft RSA SChannel Cryptographic Provider.
    3. In the Key Size box, type 1024.
    4. Click Automatic key container name.
    5. Click to select the Store Certificate in the local computer certificate store check box.
    6. Click Submit.

REFERENCES

For information about how to enhance the security of wireless local area networks (LANs), visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=60c5d0a1-9820-480e-aa38-63485eca8b9b&displaylang=en

Modification Type:MinorLast Reviewed:9/21/2005
Keywords:kbtshoot KB871222 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.