Request Certificate points to wrong Server
up vote
1
down vote
favorite
We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server is not available".
Since the URL shown in the error message points to "oldserver.domain.local" and not to "newserver.domain.local", this makes sense.
How can I change the address to the new server?
windows-server-2012-r2 certificate certificate-authority
add a comment |
up vote
1
down vote
favorite
We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server is not available".
Since the URL shown in the error message points to "oldserver.domain.local" and not to "newserver.domain.local", this makes sense.
How can I change the address to the new server?
windows-server-2012-r2 certificate certificate-authority
add a comment |
up vote
1
down vote
favorite
up vote
1
down vote
favorite
We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server is not available".
Since the URL shown in the error message points to "oldserver.domain.local" and not to "newserver.domain.local", this makes sense.
How can I change the address to the new server?
windows-server-2012-r2 certificate certificate-authority
We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server is not available".
Since the URL shown in the error message points to "oldserver.domain.local" and not to "newserver.domain.local", this makes sense.
How can I change the address to the new server?
windows-server-2012-r2 certificate certificate-authority
windows-server-2012-r2 certificate certificate-authority
asked 2 days ago
Mister 832
1236
1236
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
up vote
3
down vote
accepted
The problem is that you didn't decommission old server and its reference is still exists in Active Directory. You need to remove stale records. Here is a CA decommission guide: How to Decommission a Windows Enterprise Certification Authority and How to Remove All Related Objects
I suspect that you already removed CA server itself, so you need to perform sections 6 and 7 in referenced article.
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
2 days ago
I hope you didn't remove certificate templates from Active Directory? Check if they are listed incerttmpl.msc
MMC snap-in.
– Crypt32
2 days ago
No, they are there. It shows 34 Templates
– Mister 832
2 days ago
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
2 days ago
add a comment |
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
3
down vote
accepted
The problem is that you didn't decommission old server and its reference is still exists in Active Directory. You need to remove stale records. Here is a CA decommission guide: How to Decommission a Windows Enterprise Certification Authority and How to Remove All Related Objects
I suspect that you already removed CA server itself, so you need to perform sections 6 and 7 in referenced article.
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
2 days ago
I hope you didn't remove certificate templates from Active Directory? Check if they are listed incerttmpl.msc
MMC snap-in.
– Crypt32
2 days ago
No, they are there. It shows 34 Templates
– Mister 832
2 days ago
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
2 days ago
add a comment |
up vote
3
down vote
accepted
The problem is that you didn't decommission old server and its reference is still exists in Active Directory. You need to remove stale records. Here is a CA decommission guide: How to Decommission a Windows Enterprise Certification Authority and How to Remove All Related Objects
I suspect that you already removed CA server itself, so you need to perform sections 6 and 7 in referenced article.
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
2 days ago
I hope you didn't remove certificate templates from Active Directory? Check if they are listed incerttmpl.msc
MMC snap-in.
– Crypt32
2 days ago
No, they are there. It shows 34 Templates
– Mister 832
2 days ago
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
2 days ago
add a comment |
up vote
3
down vote
accepted
up vote
3
down vote
accepted
The problem is that you didn't decommission old server and its reference is still exists in Active Directory. You need to remove stale records. Here is a CA decommission guide: How to Decommission a Windows Enterprise Certification Authority and How to Remove All Related Objects
I suspect that you already removed CA server itself, so you need to perform sections 6 and 7 in referenced article.
The problem is that you didn't decommission old server and its reference is still exists in Active Directory. You need to remove stale records. Here is a CA decommission guide: How to Decommission a Windows Enterprise Certification Authority and How to Remove All Related Objects
I suspect that you already removed CA server itself, so you need to perform sections 6 and 7 in referenced article.
answered 2 days ago
Crypt32
3,203923
3,203923
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
2 days ago
I hope you didn't remove certificate templates from Active Directory? Check if they are listed incerttmpl.msc
MMC snap-in.
– Crypt32
2 days ago
No, they are there. It shows 34 Templates
– Mister 832
2 days ago
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
2 days ago
add a comment |
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
2 days ago
I hope you didn't remove certificate templates from Active Directory? Check if they are listed incerttmpl.msc
MMC snap-in.
– Crypt32
2 days ago
No, they are there. It shows 34 Templates
– Mister 832
2 days ago
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
2 days ago
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
2 days ago
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
2 days ago
I hope you didn't remove certificate templates from Active Directory? Check if they are listed in
certtmpl.msc
MMC snap-in.– Crypt32
2 days ago
I hope you didn't remove certificate templates from Active Directory? Check if they are listed in
certtmpl.msc
MMC snap-in.– Crypt32
2 days ago
No, they are there. It shows 34 Templates
– Mister 832
2 days ago
No, they are there. It shows 34 Templates
– Mister 832
2 days ago
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
2 days ago
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
2 days ago
add a comment |
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f940499%2frequest-certificate-points-to-wrong-server%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown