Request Certificate points to wrong Server
up vote
1
down vote
favorite
We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server is not available".
Since the URL shown in the error message points to "oldserver.domain.local" and not to "newserver.domain.local", this makes sense.
How can I change the address to the new server?
windows-server-2012-r2 certificate certificate-authority
asked Nov 17 at 14:33
Mister 832
1256
add a comment |
up vote
1
down vote
favorite
We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server is not available".
Since the URL shown in the error message points to "oldserver.domain.local" and not to "newserver.domain.local", this makes sense.
How can I change the address to the new server?
windows-server-2012-r2 certificate certificate-authority
asked Nov 17 at 14:33
Mister 832
1256
add a comment |
up vote
1
down vote
favorite
up vote
1
down vote
favorite
We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server is not available".
Since the URL shown in the error message points to "oldserver.domain.local" and not to "newserver.domain.local", this makes sense.
How can I change the address to the new server?
windows-server-2012-r2 certificate certificate-authority
asked Nov 17 at 14:33
Mister 832
1256
We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server is not available".
Since the URL shown in the error message points to "oldserver.domain.local" and not to "newserver.domain.local", this makes sense.
How can I change the address to the new server?
windows-server-2012-r2 certificate certificate-authority
windows-server-2012-r2 certificate certificate-authority
asked Nov 17 at 14:33
Mister 832
1256
asked Nov 17 at 14:33
Mister 832
1256
asked Nov 17 at 14:33
Mister 832
1256
asked Nov 17 at 14:33
Mister 832
1256
asked Nov 17 at 14:33
Mister 832
1256
1256
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
up vote
3
down vote
accepted
The problem is that you didn't decommission old server and its reference is still exists in Active Directory. You need to remove stale records. Here is a CA decommission guide: How to Decommission a Windows Enterprise Certification Authority and How to Remove All Related Objects
I suspect that you already removed CA server itself, so you need to perform sections 6 and 7 in referenced article.
answered Nov 17 at 15:11
Crypt32
3,228923
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
Nov 17 at 15:52
I hope you didn't remove certificate templates from Active Directory? Check if they are listed incerttmpl.mscMMC snap-in.
– Crypt32
Nov 17 at 15:53
No, they are there. It shows 34 Templates
– Mister 832
Nov 17 at 15:57
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
Nov 17 at 16:01
add a comment |
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
3
down vote
accepted
The problem is that you didn't decommission old server and its reference is still exists in Active Directory. You need to remove stale records. Here is a CA decommission guide: How to Decommission a Windows Enterprise Certification Authority and How to Remove All Related Objects
I suspect that you already removed CA server itself, so you need to perform sections 6 and 7 in referenced article.
answered Nov 17 at 15:11
Crypt32
3,228923
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
Nov 17 at 15:52
I hope you didn't remove certificate templates from Active Directory? Check if they are listed incerttmpl.mscMMC snap-in.
– Crypt32
Nov 17 at 15:53
No, they are there. It shows 34 Templates
– Mister 832
Nov 17 at 15:57
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
Nov 17 at 16:01
add a comment |
up vote
3
down vote
accepted
The problem is that you didn't decommission old server and its reference is still exists in Active Directory. You need to remove stale records. Here is a CA decommission guide: How to Decommission a Windows Enterprise Certification Authority and How to Remove All Related Objects
I suspect that you already removed CA server itself, so you need to perform sections 6 and 7 in referenced article.
answered Nov 17 at 15:11
Crypt32
3,228923
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
Nov 17 at 15:52
I hope you didn't remove certificate templates from Active Directory? Check if they are listed incerttmpl.mscMMC snap-in.
– Crypt32
Nov 17 at 15:53
No, they are there. It shows 34 Templates
– Mister 832
Nov 17 at 15:57
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
Nov 17 at 16:01
add a comment |
up vote
3
down vote
accepted
up vote
3
down vote
accepted
The problem is that you didn't decommission old server and its reference is still exists in Active Directory. You need to remove stale records. Here is a CA decommission guide: How to Decommission a Windows Enterprise Certification Authority and How to Remove All Related Objects
I suspect that you already removed CA server itself, so you need to perform sections 6 and 7 in referenced article.
answered Nov 17 at 15:11
Crypt32
3,228923
The problem is that you didn't decommission old server and its reference is still exists in Active Directory. You need to remove stale records. Here is a CA decommission guide: How to Decommission a Windows Enterprise Certification Authority and How to Remove All Related Objects
I suspect that you already removed CA server itself, so you need to perform sections 6 and 7 in referenced article.
answered Nov 17 at 15:11
Crypt32
3,228923
answered Nov 17 at 15:11
Crypt32
3,228923
answered Nov 17 at 15:11
Crypt32
3,228923
answered Nov 17 at 15:11
Crypt32
3,228923
3,228923
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
Nov 17 at 15:52
I hope you didn't remove certificate templates from Active Directory? Check if they are listed incerttmpl.mscMMC snap-in.
– Crypt32
Nov 17 at 15:53
No, they are there. It shows 34 Templates
– Mister 832
Nov 17 at 15:57
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
Nov 17 at 16:01
add a comment |
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
Nov 17 at 15:52
I hope you didn't remove certificate templates from Active Directory? Check if they are listed incerttmpl.mscMMC snap-in.
– Crypt32
Nov 17 at 15:53
No, they are there. It shows 34 Templates
– Mister 832
Nov 17 at 15:57
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
Nov 17 at 16:01
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
Nov 17 at 15:52
It solved this problem. However, now the ca templates on the new server can not be loaded...
– Mister 832
Nov 17 at 15:52
I hope you didn't remove certificate templates from Active Directory? Check if they are listed in
certtmpl.msc MMC snap-in.– Crypt32
Nov 17 at 15:53
I hope you didn't remove certificate templates from Active Directory? Check if they are listed in
certtmpl.msc MMC snap-in.– Crypt32
Nov 17 at 15:53
No, they are there. It shows 34 Templates
– Mister 832
Nov 17 at 15:57
No, they are there. It shows 34 Templates
– Mister 832
Nov 17 at 15:57
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
Nov 17 at 16:01
I openend a new question, see serverfault.com/questions/940508/… . I would be gratefull for your advice.
– Mister 832
Nov 17 at 16:01
add a comment |
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f940499%2frequest-certificate-points-to-wrong-server%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
