Security

Ask something
Discussion Locked

Cert Authority wont install

0 helpful
11 replies

by dumphrey

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

When attempting to install Certification Authority on our DC, I receive an error saying, "An error occured while generating key for . Either the CSP configuration is not complete or the key length is not supported. Plese make sure the CSP is installed correctly or select another CSP."
Okay, how do I check the CSP install, and or configuration?

11 replies

by lowlands

Check if you have the following key in the registry on the server you are trying to install the CA on.
HKEY_CURRENT_USER\Software\Microsoft\Cryptography\Defaults\Provider
Types\Type 001.

If the key exists, back up, delete it and restart. Then try running the install again.

Editing registry at own risk etc etc etc :)

by dumphrey

Poster rated this answer.
I tried this first =\ but the key was not there to delete.

by dumphrey

Looked in registry. Crytography ends there..there are sub-hives for templates and autoenrollment, but not for default provider.

by sgt_shultz

do you have related error in Application event log on the dc? that we could look up at support.microsoft.com

by dumphrey

Poster rated this answer.
The article applies to CA errors once installed...I cant get CA to install. Looks like Im going to have to convice Buisness to spring for a second DC. Which we need no matter the CA issue.

by dumphrey

The article would help more if I could actually install CA services. I keep getting the error about no CSP. I also keep getting DCOM error 10005 in event viewer, but I dont think they are realated.

This discussion is closed to new replies.