Certreq Error Cannot Find Object
Contents |
(עברית)المملكة العربية السعودية (العربية)ไทย (ไทย)대한민국 (한국어)中华人民共和国 (中文)台灣 (中文)日本 (日本語) Home2012Previous VersionsLibraryForumsGallery Ask a question Quick access Forums home Browse forums users FAQ Search related threads Remove From My Forums Answered certificate request cannot find object or property by: CertReq.exe -Accept Throwing Error "Cannot Find Object or Property" certificate request processor cannot find object - Native Mode Deployment System Center Configuration Manager > Configuration Manager 2007 General Question 0 Sign cannot find object or property 0x80092004 2146885628 in to vote Hi We are deploying SCCM 2007 in Native Mode and are stuck in the process of deploying Site Server Signing Certificate, certreq accept 0x80092004 followed the instructions at http://technet.microsoft.com/en-us/library/bb632727.aspx Our environment is as follows: 1. Root Domain 2. Child Domain – We have to install SCCM 2007 in this domain We have an existing PKI Infrastructure, where we have a Enterprise Root CA and a subordinate CA (both in Child
Certreq 0x80092004 2146885628
Domain). We are using Subordinate CA to issue SCCM certificates. The CAs are running Windows 2003 SP2 Enterprise Version. Our SCCM Server (SCCM to be installed) is Windows 2008 Enterprise SP1. We are using a user ID which is member of Enterprise Admins group, to Duplicate the Certificates. We installed KB922706 on our subordinate CA only. We are using the CertReq.exe utility to perform the task of requesting and accepting the Certificate on server. While installing the Site Server Certificate on Site Server, everything goes fine until we run the following command: certreq –accept sitesigning.cer When the command runs, an error message is thrown in a popup (Certificate Request Processor) window saying “Cannot find Object or Property 0x80092004 (-2146885628)”. I can see the Certificate on the Certificate Autohrity as issued with the correct Serial No. Kindly suggest where I am going wrong
Start here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings and policies of this site About Us Learn more about Stack Overflow the company Business Learn more
Cannot Find Object Or Property. 0x80092004 (-2146885628 Crypt_e_not_found)
about hiring developers or posting ads with us Server Fault Questions Tags Users Badges Unanswered certutil crypt_e_not_found Ask Question _ Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute: Sign certreq accept up Here's how it works: Anybody can ask a question Anybody can answer The best answers are voted up and rise to the top How to find out which server generated a CSR up vote 6 down vote favorite https://social.technet.microsoft.com/Forums/systemcenter/en-US/e09a36ca-6b60-4b54-9607-42c60efe590b/certreqexe-accept-throwing-error-cannot-find-object-or-property-native-mode-deployment?forum=configmgrgeneral I sent a client a CSR a few months ago and now they finally sent me back the CA response. However, there are multiple Windows 2008R2 servers and I don't remember which one I used to generate the CSR and, therefore, I don't know which server contains the private key. How can I find out? Update On the server I suspected was the right one, I went into the certificate management for the local computer using the MMC http://serverfault.com/questions/589564/how-to-find-out-which-server-generated-a-csr (certmgr.msc) and under Certificates (Local Computer) > Certificate Enrollment Requests > Certificates, I found the private key associated with the CSR. My problem is, however, that when I try to complete the request from IIS (where I created the CSR) it doesn't associate it with this private key. I tried certreq -accept -machine "c:\cert.crt" but I get this error: Certificate Request Processor: Cannot find object or property. 0x80092004 (-2146 885628) 2nd Update I was able to figure out that the client used a different CSR than we sent them to request the certificate. I did this by comparing the "Issued To" info on their certificate to the same info on the CSR I sent them and found that the cities were different. Hope that helps someone else out there dealing with problematic clients :) windows http ssl-certificate iis-7.5 share|improve this question edited Apr 17 '14 at 0:49 asked Apr 16 '14 at 20:32 blizz 467624 6 Heh... do a certreq -accept on each server and see which one takes the certificate? :) –Ryan Ries Apr 16 '14 at 20:59 1 or save some time and do it via powershell all at once - Invoke-Command then feed it a list of server names :D –Aceth Jun 30 '14 at 21:06 add a comment| 1 Answer 1 active oldest votes up vote 1 down vote You could try and use the openS
Start here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings and policies of this site About Us Learn more about http://serverfault.com/questions/749822/completing-certificate-request-via-command-line-in-windows-server Stack Overflow the company Business Learn more about hiring developers or posting ads with https://www.ssl247.com/kb/ssl-certificates/troubleshooting/microsoft/cannot-find-object-or-property-0x80092004 us Server Fault Questions Tags Users Badges Unanswered Ask Question _ Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute: Sign up Here's how it works: Anybody can ask a question Anybody can answer The best answers are voted up and rise to the top cannot find Completing certificate request via command line in Windows Server up vote 2 down vote favorite I administrate a number of Windows Servers (mostly 2008 R2 or 2012 R2) and I have to process a lot of SSL certificate renewals. When we renew from our vendor, Globalsign, they automatically generate a certificate request used for the renewal. When I install the completed certificate through the Server Certificates section in IIS, it accepts cannot find object the certificate with no fuss. However, when I try and use certreq -accept "C:\certpath.cer" to install the completed certificate, it returns an error like the following: Certificate Request Processor: Cannot find object or property. 0x80092004 (-2146885628 CRYPT_E_NOT_FOUND) Is there any way to get around this without generating a certificate request on the server beforehand, or is there another command that would work better? The aforementioned command does work if the request has been generated on the server manually, but the fact that I can still get the certificate installed with private key via the GUI means that it should be possible through command line somehow too. windows-server-2008-r2 ssl-certificate share|improve this question asked Jan 18 at 2:29 bluegrey 112 1 Look at this thread: stackoverflow.com/questions/33129110/… and make sure that you are installing the certificate on the *same* server where the certificate was generated. –CryptoGuy Jan 18 at 6:48 The request in question was never generated on the server that I'm trying to complete it on (though the request for a previous certificate for the same domain was, at some point); it was generated by Globalsign's portal. That's why it's so weird to me that IIS accepts it and attaches a private key, presumably the old one. I'm just tryin
0 items View Basket 1-800-511-9176 Menu SSL Certificates Products by Brand Symantec Symantec SSL Certificates - The leading mark of confidence for excellence VeriSign VeriSign SSL Certificates – This recognizable brand is now owned by Symantec GeoTrust GeoTrust SSL Certificates – Trusted Certificates for professional use Thawte Thawte SSL Certificates – Premium protection from a trusted certificate authority GlobalSign GlobalSign SSL Certificates – Quality SSL certificates Comodo Comodo SSL certificates – Affordable certificates from a global brand RapidSSL RapidSSL SSL Certificates – Entry level certificates for internal use Products by Type SAN WILDCARD SSL SAN Wildcard SSL - The cost effective and truly flexible multi-use certificate SAN SSL SAN SSL Certificates ECC SSL ECC Encryption - Stronger and Faster Wildcard SSL Wildcard SSL Certificates IP address SSL IP address SSL Certificates Free Trials SSL Free 30 day SSL trials Products by Validation Extended Validation Extended Validation SSL - the 'Green Bar of Trust' Get your EV SSL certificate in 4-5 days Organization Validation Organization Validation Get your OV SSL certificate in 48 hours Symantec Ready Issuance with SSL247® Issue your OV SSL certificate instantly with Ready Issuance Domain Validation Domain Validated SSL Certificates Get your DV SSL certificate available in 10 minutes Renew in advance and get your validity period extended. Renew Not sure? Try our Wizard Ask us your question Share this page Tel: 1-800-511-9176 MPKI Free Trials Our Free Trials GeoTrust Free SSL Free Vulnerability Scan Digital IDs Our Digital IDs Personal IDs PDF Signing Code Signing Penetration Testing Our Penetration Testing Domain Names Register domain names Premium Domain Names New gTLDs By category By release date Brand Protection Our service DPML TMCH New gTLDs By category By release date Wizard Test our Wizard Support Help & Support Create your CSR Download Roots & Intermediates Install Certificate Install Site Seal Digital IDs SSL Glossary SSL Tools CSR Generator Knowledge Base S