Manually request for user certificate

hi. as part of project, i've been tasked with learning how manually request user certifcate our server 2008 r2 server, i've done - when request cert, whichever user logged in @ computer i'm on issued certificate. issue how request user certs specific users single computer, regardless of user logged on. there requestpolicy.inf entries can make?

thanks!! lee

just tested again, certreq.exe in windows 2008 r2 sp1 not sign request using "certreq.exe -sing request.req signedrequest.req" , terminated error:

certificate request processor: attempt made perform initialization operation when initialization has been completed. 0x800704df (win32: 1247)

the windows 2003 version of certreq.exe worked fine in 2008 r2 sp1 , sign request no errors!

the test setup using v2 template subject information supplied in request , 1 agent signing issuance requirement

my test request.inf file is:

---------------------------------------------

 

[newrequest]

requesttype = cmc

subject = "cn=sctest"

[extensions]

2.5.29.17 = "{text}"

_continue_ = "email=ldavila@tachc.org&"

_continue_ = "upn=ldavila@tachc.org&"

[requestattributes]

certificatetemplate = user1

---------------------------------------------

the procedure followed both versions of certreq.exe is:

1. certreq -new request.inf certificate.req
2. certreq -sign certificate.req signedcertificate.req [the tool prompts agent cert if -cert omitted]
3. certreq -submit signedcertificate.req certificate.cer

the requester name filled in certreq/ca correctly when looking @ adcs database.

this must indicate bug in certreq.exe version 2008 r2 sp1. working certreq.exe part of the windows server 2003 administration tools pack downloaded from http://www.microsoft.com/download/en/confirmation.aspx?id=16770

/hasain

Windows Server  >  Security