"0x800B0112" Error Message When You Enroll a Smart Card User (255681)

RESOLUTION

To resolve this issue, install the root CA certificate in the trusted root store of the Smart Card Enrollment station. You can install this certificate in the Smart Card Enrollment station, or in Group Policy.

Before you begin any of the following procedures, download a certificate for the root CA:

1. Start Internet Explorer, and then go to the following location:

   http://Root CAs NetbiosName/certsrv

2. Click Retrieve the certificate or certificate revocation list.
3. Click Download CA certificate.
4. Save the Certnew.cer file on your hard disk. Use this file when you are prompted to import the certificate for the trusted CA.

How to Install the Certificate in the Smart Card Enrollment Station

1. Start Microsoft Management Console (MMC), and then add the Certificate snap-in.
2. Click Computer account, and then click Local computer.
3. Navigate to the Certificates folder that is located in the Trusted Root Certification Authorities folder.
4. Click the Certificate folder, point to All Tasks on the Action menu, and then click Import. The Certificate Import Wizard starts, and then guides you through the procedure to import and install a root certificate.

How to Install the Certificate in Group Policy

1. Start the Group Policy object that you want to apply to the Smart Card Enrollment stations.
2. Navigate to the Trusted Root Certificate Authorities folder that is located in the following folder:

   Computer Configuration\Windows Settings\Security Settings\Public Key Policies

3. Click the Trusted Root Certificate Authorities folder, point to All Tasks on the Action menu, and then click Import. The Certificate Import Wizard starts, and then guides you through the procedure to import and install a root certificate.