<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16915" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>Hi everyone
-</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>I'm having trouble
getting a certificate installed for our UCM, using a cert supplied by our domain
CA server (not a public CA server)</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>This may be a more
Microsoft-side issue, but I'm hoping that some of the users on here have done
this, and know how to get the certificate request </FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>to work right in the
Microsoft side.</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>UCM
6.1.1-3002</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>Windows 2003
Standard domain controller acting as our CA server.</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>I've done the
following steps</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>In OS Admin,
Security, Certificate Management</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>1. done a
certificate signing request for the tomcat</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>2. Downloaded the
resulting file to a folder.</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>What I'm having
trouble with is this:</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>When I go to the
website for my CA server</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2><A
href="http://<myserver>/certsrv/certrqxt.asp">http://<myserver>/certsrv/certrqxt.asp</A></FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>and select "Request
a Certificate", then "Advanced Certificate Request" (because I'm not doing a
simple User cert), then select</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><STRONG>Submit a Certificate Request or
Renewal Request</LOCID></STRONG> </SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>I get the page where
you can browse and upload a certificate, select from the dropdown to use the
correct template.</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>From this link, you
can see that there's a template for "Web Server"</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2><A
href="http://www.linuxmail.info/images/windows-xp/certsrv-certrqxt.png">http://www.linuxmail.info/images/windows-xp/certsrv-certrqxt.png</A></FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>My CA doesn't
have that template - I don't know why.</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>I have Basic EFS,
User, and IPSEC (offline)</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>This is essentially
the same process:</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2><A
href="http://www.linuxmail.info/submitting-certificate-request-to-microsoft-certificate-services/">http://www.linuxmail.info/submitting-certificate-request-to-microsoft-certificate-services/</A></FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>I realise that is
for Linux mailservers, but the concept is the same -- </FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>Many articles I've
seen deal with XP/Vista/IIS client/application issues where it's an
all-Microsoft world.</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>But this certificate
request is NOT coming from a Microsoft platform (as we know Cisco isn't using
Microsoft any more)</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>So a lot of the
articles online don't directly deal with my issue of why that template isn't
available..</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial size=2>Any
ideas?</FONT></SPAN></DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=462523316-20112009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV> </DIV>
<DIV align=left><FONT face=Arial size=2>Tim Reimers</FONT></DIV>
<DIV align=left><FONT face=Arial size=2>Systems Analyst II</FONT></DIV>
<DIV align=left><FONT face=Arial size=2>Information Technology
Services</FONT></DIV>
<DIV align=left><FONT face=Arial size=2>City of Asheville</FONT></DIV>
<DIV align=left><FONT face=Arial size=2>70 Court Plaza</FONT></DIV>
<DIV align=left><FONT face=Arial size=2>Asheville, NC 28801</FONT></DIV>
<DIV align=left><FONT face=Arial size=2>phone - 828-259-5512</FONT></DIV>
<DIV align=left><FONT face=Arial size=2><A
href="mailto:timreimers@ashevillenc.gov">treimers@ashevillenc.gov</A></FONT></DIV>
<DIV> </DIV></BODY></HTML>