Re: Renewing a Sub-CA certificate
On my IAS server: A certification chain processed correctly, but one of the CA certificates is not trusted by the policy provider. Troy Adkins Network Administrator Virginia House of Delegates General Assembly Bldg. Room 815 804.698.1567 (O) 804.771.7917 (F) tadk...@house.virginia.gov http://legis.virginia.gov From: William Robbins dangerw...@gmail.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 01/11/2012 11:29 PM Subject:Re: Renewing a Sub-CA certificate So...what's in the event log on the sub CA? - WJR On Wed, Jan 11, 2012 at 18:30, Troy Adkins tadk...@house.virginia.gov wrote: I have an Enterprise CA and 2 Sub-CA's. One domain has the Enterprise CA, the other 2 domains have the Sub-CA's. One Sub CA certificate in one domain has expired. I can't seem to get it renewed. What am I missing? The cert is used for wireless access certificate. I can authenticate with a user cert or a computer cert. Troy Adkins Network Administrator Virginia House of Delegates General Assembly Bldg. Room 815 804.698.1567 (O) 804.771.7917 (F) tadk...@house.virginia.gov http://legis.virginia.gov ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Renewing a Sub-CA certificate
So have you installed the certificate chain? - WJR On Thu, Jan 12, 2012 at 06:41, Troy Adkins tadk...@house.virginia.govwrote: On my IAS server: A certification chain processed correctly, but one of the CA certificates is not trusted by the policy provider. Troy Adkins Network Administrator Virginia House of Delegates General Assembly Bldg. Room 815 804.698.1567 (O) 804.771.7917 (F) tadk...@house.virginia.gov http://legis.virginia.gov From:William Robbins dangerw...@gmail.com To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/11/2012 11:29 PM Subject:Re: Renewing a Sub-CA certificate -- So...what's in the event log on the sub CA? - WJR On Wed, Jan 11, 2012 at 18:30, Troy Adkins *tadk...@house.virginia.gov*tadk...@house.virginia.gov wrote: I have an Enterprise CA and 2 Sub-CA's. One domain has the Enterprise CA, the other 2 domains have the Sub-CA's. One Sub CA certificate in one domain has expired. I can't seem to get it renewed. What am I missing? The cert is used for wireless access certificate. I can authenticate with a user cert or a computer cert. Troy Adkins Network Administrator Virginia House of Delegates General Assembly Bldg. Room 815* **804.698.1567* 804.698.1567 (O)* **804.771.7917* 804.771.7917 (F)* **tadk...@house.virginia.gov* tadk...@house.virginia.gov* **http://legis.virginia.gov* http://legis.virginia.gov/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ *http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/*http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: * http://lyris.sunbelt-software.com/read/my_forums/*http://lyris.sunbelt-software.com/read/my_forums/ or send an email to *listmana...@lyris.sunbeltsoftware.com*listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ *http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/*http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: * http://lyris.sunbelt-software.com/read/my_forums/*http://lyris.sunbelt-software.com/read/my_forums/ or send an email to *listmana...@lyris.sunbeltsoftware.com*listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Renewing a Sub-CA certificate
If your subordinate CA's signing certificate has expired, then you need to get that renewed by your root CA. Is that the issue? If so, have you tried renewing the sub CA's signing cert? If so, what was the error you have received? Cheers Ken From: Troy Adkins [mailto:tadk...@house.virginia.gov] Sent: Thursday, 12 January 2012 8:41 PM To: NT System Admin Issues Subject: Re: Renewing a Sub-CA certificate On my IAS server: A certification chain processed correctly, but one of the CA certificates is not trusted by the policy provider. Troy Adkins Network Administrator Virginia House of Delegates General Assembly Bldg. Room 815 804.698.1567 (O) 804.771.7917 (F) tadk...@house.virginia.govmailto:tadk...@house.virginia.gov http://legis.virginia.govhttp://legis.virginia.gov/ From:William Robbins dangerw...@gmail.commailto:dangerw...@gmail.com To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Date:01/11/2012 11:29 PM Subject:Re: Renewing a Sub-CA certificate So...what's in the event log on the sub CA? - WJR On Wed, Jan 11, 2012 at 18:30, Troy Adkins tadk...@house.virginia.govmailto:tadk...@house.virginia.gov wrote: I have an Enterprise CA and 2 Sub-CA's. One domain has the Enterprise CA, the other 2 domains have the Sub-CA's. One Sub CA certificate in one domain has expired. I can't seem to get it renewed. What am I missing? The cert is used for wireless access certificate. I can authenticate with a user cert or a computer cert. Troy Adkins Network Administrator Virginia House of Delegates General Assembly Bldg. Room 815 804.698.1567tel:804.698.1567 (O) 804.771.7917tel:804.771.7917 (F) tadk...@house.virginia.govmailto:tadk...@house.virginia.gov http://legis.virginia.govhttp://legis.virginia.gov/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Renewing a Sub-CA certificate
So...what's in the event log on the sub CA? - WJR On Wed, Jan 11, 2012 at 18:30, Troy Adkins tadk...@house.virginia.govwrote: I have an Enterprise CA and 2 Sub-CA's. One domain has the Enterprise CA, the other 2 domains have the Sub-CA's. One Sub CA certificate in one domain has expired. I can't seem to get it renewed. What am I missing? The cert is used for wireless access certificate. I can authenticate with a user cert or a computer cert. Troy Adkins Network Administrator Virginia House of Delegates General Assembly Bldg. Room 815 804.698.1567 (O) 804.771.7917 (F) tadk...@house.virginia.gov http://legis.virginia.gov ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
