Error Message: Windows Cannot Find a Certification Authority That Will Process This Request (279780)



The information in this article applies to:

  • Microsoft Windows 2000 Server SP1
  • Microsoft Windows 2000 Advanced Server SP1
  • Microsoft Windows 2000 Professional SP1

This article was previously published under Q279780

SYMPTOMS

When you are using the Certificates Microsoft Management Console (MMC) snap-in to request a new certificate, you receive the following error message:
Windows cannot find a certification authority that will process this request.

CAUSE

If there is a published Enterprise Certificate Authority (CA) in the Active Directory, then it is not trusted. The CA certificate is not installed in the Trusted Root store for the user, or for the local computer.

RESOLUTION

Using the Certificates MMC snap-in, verify that the CA certificate for Enterprise CA does not exist in either the user's Trusted Root store, or the local computer's Trusted Root store. If it does not, you can download the CA certificate in one of the following two:

Windows Enterprise Certificate Authorities automatically publish their CA certificates in the Enterprise Trusted Root store. Certificates in the Enterprise Trusted Root store are pushed out to all clients by way of the Security Group Policy. You can refresh the Security policy on the client by using the following command:

secedit /refreshpolicy machine_policy /enforce

As an alternative, follow these steps to download the CA certificate directly from the CA Web pages (assuming that IIS is installed):
  1. Point the client's browser to:

    http://CAServerName/certsrv

  2. Select Retrieve the CA certificate or certificate revocation list, and then click Next.
  3. Click Install this CA certification path.

Modification Type:MinorLast Reviewed:1/26/2006
Keywords:kbenv kbprb KB279780