Certificate Web Enrollment Problem

have windows server 2008 enterprise root ca different windows 2008 server running cert enrollment website (ussing ssl).  certificate attempt request (vista or xp) results in:

============================================

your request failed. error occurred while server processing request.

contact administrator further assistance.

request mode:

newreq - new request

disposition:

(never set)

disposition message:

(none)

result:

the rpc server unavailable. 0x800706ba (win32: 1722)

com error info:

ccertrequest::submit: rpc server unavailable. 0x800706ba (win32: 1722)

laststatus:

the operation completed successfully. 0x0 (win32: 0)

suggested cause:

this error can occur if certification authority service has not been started.

=================================


the windows firewall off between web enrollment server , ca, 443 open in web enrollment server externally.


what missing here?  rapidly becoming showstopper.

thanks,

bh

update: there no dns name resolution on workgroup machine on internal network.  added entry in hosts file hit site name rather ip , request processed.  when repeating process on workgroup machine on interent, rpc error remained.

firewall issue?

Windows Server  >  Directory Services