General discussion

Locked

Cert Authority wont install

By Dumphrey ·
When attempting to install Certification Authority on our DC, I receive an error saying, "An error occured while generating key for <ca.domain>. Either the CSP configuration is not complete or the key length is not supported. Plese make sure the CSP is installed correctly or select another CSP."
Okay, how do I check the CSP install, and or configuration?

This conversation is currently closed to new comments.

11 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by lowlands In reply to Cert Authority wont insta ...

Check if you have the following key in the registry on the server you are trying to install the CA on.
HKEY_CURRENT_USER\Software\Microsoft\Cryptography\Defaults\Provider
Types\Type 001.

If the key exists, back up, delete it and restart. Then try running the install again.

Editing registry at own risk etc etc etc :)

Collapse -

by Dumphrey In reply to

Poster rated this answer.
I tried this first =\ but the key was not there to delete.

Collapse -

by Dumphrey In reply to Cert Authority wont insta ...

Looked in registry. Crytography ends there..there are sub-hives for templates and autoenrollment, but not for default provider.

Collapse -

by lowlands In reply to Cert Authority wont insta ...

What is the Windows version and SP level of your dc(s)?

Collapse -

by Dumphrey In reply to

Poster rated this answer.

Collapse -

by Dumphrey In reply to Cert Authority wont insta ...

DC is Widows Server 2003 standard SP 1

Collapse -

by sgt_shultz In reply to Cert Authority wont insta ...

do you have related error in Application event log on the dc? that we could look up at support.microsoft.com

Collapse -

by sgt_shultz In reply to

maybe this will help;
http://support.microsoft.com/kb/903220/en-us

Collapse -

by Dumphrey In reply to

Poster rated this answer.
The article applies to CA errors once installed...I cant get CA to install. Looks like Im going to have to convice Buisness to spring for a second DC. Which we need no matter the CA issue.

Collapse -

by Dumphrey In reply to Cert Authority wont insta ...

The article would help more if I could actually install CA services. I keep getting the error about no CSP. I also keep getting DCOM error 10005 in event viewer, but I dont think they are realated.

Back to Security Forum
11 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums