Microsoft Knowledge Base Email Alertz

KBAlertz.com: In Windows Server 2003, the Enterprise root CA option is not available when you try to install the Certificate Services component

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]

Search KbAlertz

Advanced Search

Webmasters
Put kbAlertz on your website.
[ Click Here for more! ]





ASP.NET 3.5 Web Hosting with Windows 2008 and SQL 2008: Click Here!
Discount ASP.NET Hosting
ASP.NET 2.0 and 3.5
Windows2008 and SQL2008
US and UK Hosting
KBAlertz referrals get
** SIX MONTHS FREE **


Community Site



We Send hundreds of thousands of emails using ASP.NET Email


ASP.NET 3.5 Web Hosting with Windows 2008 and SQL 2008: Click Here!
Discount ASP.NET Hosting
ASP.NET 2.0 and 3.5
Windows2008 and SQL2008
US and UK Hosting
KBAlertz referrals get
** SIX MONTHS FREE **




Mentioned In








Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks




Article ID: 938613 - Last Review: June 11, 2009 - Revision: 2.0

In Windows Server 2003, the "Enterprise root CA" option is not available when you try to install the Certificate Services component

System TipThis article applies to a different version of Windows than the one you are using. Content in this article may not be relevant to you.Visit the Windows Vista Solution Center

SYMPTOMS

In Microsoft Windows Server 2003, the Enterprise root CA option is not available. This issue occurs when you try to install the Certificate Services component and set up a certification authority.

CAUSE

This issue can occur if the Public Key Services container does not exist in the Active Directory directory service. For example, this issue can occur if the ADSIEdit tool (Adsiedit.msc) was used to delete the Public Key Services container.

RESOLUTION

To resolve this issue, re-create the Public Key Services container, as follows.

Note These steps require the Adsiedit.msc tool. The Adsiedit.msc tool is included when you install Windows Server 2003 Support Tools.
  1. Click Start, click Run, type Adsiedit.msc, and then click OK.
  2. Expand Configuration, and then expand CN=Configuration,dc= Domain Component,dc= Domain Component
  3. Right-click CN=Services, point to New, and then click Object.
  4. Click container, click Next, type Public Key Services, click Next, and then click Finish.
  5. Right-click Public Key Services, point to New, and then click Object.
  6. Click container, click Next, type AIA, click Next, and then click Finish.
  7. Right-click Public Key Services, point to New, and then click Object.
  8. Click container, click Next, type CDP, click Next, and then click Finish.
  9. Right-click Public Key Services, point to New, and then click Object.
  10. Click container, click Next, type Certificate Templates, click Next, and then click Finish.
  11. Right-click Public Key Services, point to New, and then click Object.
  12. Click container, click Next, type Certification Authorities, click Next, and then click Finish.
  13. Right-click Public Key Services, point to New, and then click Object.
  14. Click container, click Next, type Enrollment Services, click Next, and then click Finish.
  15. Right-click Public Key Services, point to New, and then click Object.
  16. Click container, click Next, type KRA, click Next, and then click Finish.
  17. Right-click Public Key Services, point to New, and then click Object.
  18. Click msPKI-Enterprise-OID, click Next, type OID, click Next, and then click Finish.
  19. Try to install the Certificate Services component again.

APPLIES TO
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
  • Microsoft Windows Server 2003, Datacenter x64 Edition
Keywords: 
kbtshoot kbprb KB938613
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate

Be the first to leave feedback, to help others about this knowledge base article.

(Optional) Name

(Optional) Public URL Or Email

Comments
No HTML -- Text Only Please