Error: CAPI2 = 80093005 When Installing a WWW Certificate (269290)



The information in this article applies to:

  • Microsoft Internet Information Server 4.0
  • Microsoft Certificate Services 2.0

This article was previously published under Q269290
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

SYMPTOMS

When you install a DER-encoded certificate that was issued by a computer that is running Microsoft Certificate Server 2.0 on a computer that is running Microsoft Windows NT 4.0 Internet Information Server 4.0, you may receive the following error in Key Manager:
The Certificate is invalid. Please double-check that you have chosen the correct file.

CAPI2 error = 80093005

CAUSE

Certificate Server 2.0 has two certificate formats: DER and Base64. Windows NT 4.0 Key Manager cannot process DER-encoded certificates.

RESOLUTION

When you download the certificate from Certificate Server 2.0, select the Base64 encoded option instead of DER encoded.

-or-

Convert your existing certificate (.cer) file to Base64 encoded by using the following command.
certutil -encode <source certificate (*.cer)> <output certificate (*.cer)>
				

MORE INFORMATION

CertUtil is a command line utility that is installed with Certificate Server 1.0 and 2.0.

Modification Type:MinorLast Reviewed:6/23/2005
Keywords:kbprb KB269290