Prev: Windows ACL
Next: Shadow Copies not working on schedule
From: S D on 16 Jan 2010 15:27
I have a CA installed on my domain controller. Server Authentication
certificate is enrolled in Computer Certificate/Personal folder. The same
certificate is used for ssl and is working OK. If I use it for Remote
Desktop Server Authentication I get an error from client:
"The connection has been terminated because an unexpected server
authentication certificate was received from the remote computer."
If I try to connect from domain controller, certificate is accepted.

If I use self signed (generic) certificate, connection works without a
problem.

Certificate is enrolled from Web Server template (CA).

Thanks for help in advance!



__________ Information from ESET NOD32 Antivirus, version of virus signature database 4778 (20100116) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com



From: S D on 18 Jan 2010 15:50
I found this link:
http://donaldc.wordpress.com/2009/08/25/revocation-check-could-not-be-performed-for-the-certificate/

I will answer this question by myself:

Certificate Revocation List is required. CDP was removed from certificate
and CRL can't be found in Trusted Root Certification Authorities.
We have two options:
1. To setup CRL on CA server and then add CDP/CRL extension to certificate
2. To install CRL certificate in Computer/Trusted Root Certification
Authorities (it has to be valid).


"S D" <si124(a)hotmail.com> wrote in message
news:C16B9405-A980-433A-8374-5140DCC7031A(a)microsoft.com...
> I have a CA installed on my domain controller. Server Authentication
> certificate is enrolled in Computer Certificate/Personal folder. The same
> certificate is used for ssl and is working OK. If I use it for Remote
> Desktop Server Authentication I get an error from client:
> "The connection has been terminated because an unexpected server
> authentication certificate was received from the remote computer."
> If I try to connect from domain controller, certificate is accepted.
>
> If I use self signed (generic) certificate, connection works without a
> problem.
>
> Certificate is enrolled from Web Server template (CA).
>
> Thanks for help in advance!
>
>
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature database 4778 (20100116) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature database 4784 (20100118) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>

__________ Information from ESET NOD32 Antivirus, version of virus signature database 4784 (20100118) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com



 | 
Pages: 1
Prev: Windows ACL
Next: Shadow Copies not working on schedule