So my Cert Server was working for years without issue (windows 2003). I noticed yesterday that my wireless network was refusing authentication. I looked at my Cisco aironet 1000 and 1200 APs and did not see anything amiss except for the error in the log:
Interface Dot11Radio0, Deauthenticating Station ... Reason: Previous authentication no longer valid
I looked at my AD server and found the following errors:
Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 13
Date: 1/27/2009
Time: 4:16:57 PM
User: N/A
Computer: MYADServer
Description:
Automatic certificate enrollment for local system failed to enroll for one Domain Controller certificate (0x80070005). Access is denied.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
This was caused by my upgrade of my CertServ to SP2 .
The issue was resolved by adding the AD group Domain controllers to the CERTSVC_DCOM_ACCESS group.
Now my AD server is autoenrolling and receiving a Domain controller certificate from my Cert server and in turn my users are now able to authenticate and logon to my wireless network.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment