Guest Benny Huyghe Posted April 25, 2008 Posted April 25, 2008 Certification Authority 0x8009480f error : the dns name is unavailable and cannot b e added to the subjectalternatename. This error I get all the time when automatic certificate allocation wants to give a certificate to a domain pc. I have a W2K3 domain, the pc is W2K SP4. in the logs there is nothing wrong with DNS. Tried to kick te pc out of the domain and back, nothing changed. Removed CA and reinstalled, nothing changed. Something strange when I follow procedure for configuring aut. cert. alloc., after selecting the computer out of the templates, I won't get the enterprise ROOT CA, just window with name and computer. Is this the cause of the above problem? What can I do to solve this problem. Thank you. Quote
Guest Brian Komar \(MVP\) Posted April 26, 2008 Posted April 26, 2008 I have no idea what you are asking I need more details Brian "Benny Huyghe" <BennyHuyghe@discussions.microsoft.com> wrote in message news:63AAC865-E0CA-4F92-9B10-851F8BE3EBDD@microsoft.com...<span style="color:blue"> > Certification Authority 0x8009480f error : the dns name is unavailable and > cannot b e added to the subjectalternatename. > This error I get all the time when automatic certificate allocation wants > to > give a certificate to a domain pc. > I have a W2K3 domain, the pc is W2K SP4. > in the logs there is nothing wrong with DNS. > Tried to kick te pc out of the domain and back, nothing changed. > Removed CA and reinstalled, nothing changed. > Something strange when I follow procedure for configuring aut. cert. > alloc., > after selecting the computer out of the templates, I won't get the > enterprise > ROOT CA, just window with name and computer. > Is this the cause of the above problem? What can I do to solve this > problem. > > Thank you. > </span> Quote
Guest Benny Huyghe Posted April 28, 2008 Posted April 28, 2008 Sorry that I wasn't clear. I was following the doc Ethernet Switch Access with IAS : http://technet2.microsoft.com/windowsserve...8caf191033.mspx Here I saw that I needed configure automatic certificate allocation from an enterprise CA : http://technet2.microsoft.com/windowsserve...3.mspx?mfr=true Although I followed the procedure and got no error message, the problem is that my client pc doesn't get the certificate. I open the Certificate Authority, go to failed requests and get this message: 0x8009480f error : the dns name is unavailable and cannot be added to the subject alternate name : denied by policy module resubmit failed too. I hope this helps. "Brian Komar (MVP)" wrote: <span style="color:blue"> > I have no idea what you are asking > I need more details > Brian > > "Benny Huyghe" <BennyHuyghe@discussions.microsoft.com> wrote in message > news:63AAC865-E0CA-4F92-9B10-851F8BE3EBDD@microsoft.com...<span style="color:green"> > > Certification Authority 0x8009480f error : the dns name is unavailable and > > cannot b e added to the subjectalternatename. > > This error I get all the time when automatic certificate allocation wants > > to > > give a certificate to a domain pc. > > I have a W2K3 domain, the pc is W2K SP4. > > in the logs there is nothing wrong with DNS. > > Tried to kick te pc out of the domain and back, nothing changed. > > Removed CA and reinstalled, nothing changed. > > Something strange when I follow procedure for configuring aut. cert. > > alloc., > > after selecting the computer out of the templates, I won't get the > > enterprise > > ROOT CA, just window with name and computer. > > Is this the cause of the above problem? What can I do to solve this > > problem. > > > > Thank you. > > </span> > > </span> Quote
Guest Brian Komar \(MVP\) Posted April 28, 2008 Posted April 28, 2008 In Active Directory, check the properties of the client PC. The PC's DNS name attribute is empty, and the CA is unable to populate the SAN with the DNS name Input the DNS name, and the request should succeed. Brian "Benny Huyghe" <BennyHuyghe@discussions.microsoft.com> wrote in message news:DD90320D-E1EA-4384-BD6C-B7B530472BDF@microsoft.com...<span style="color:blue"> > Sorry that I wasn't clear. > I was following the doc Ethernet Switch Access with IAS : > http://technet2.microsoft.com/windowsserve...8caf191033.mspx > > Here I saw that I needed configure automatic certificate allocation from > an > enterprise CA : > http://technet2.microsoft.com/windowsserve...3.mspx?mfr=true > > Although I followed the procedure and got no error message, the problem is > that my client pc doesn't get the certificate. > > I open the Certificate Authority, go to failed requests and get this > message: > 0x8009480f error : the dns name is unavailable and cannot be added to the > subject alternate name : denied by policy module > > resubmit failed too. > > I hope this helps. > > > "Brian Komar (MVP)" wrote: ><span style="color:green"> >> I have no idea what you are asking >> I need more details >> Brian >> >> "Benny Huyghe" <BennyHuyghe@discussions.microsoft.com> wrote in message >> news:63AAC865-E0CA-4F92-9B10-851F8BE3EBDD@microsoft.com...<span style="color:darkred"> >> > Certification Authority 0x8009480f error : the dns name is unavailable >> > and >> > cannot b e added to the subjectalternatename. >> > This error I get all the time when automatic certificate allocation >> > wants >> > to >> > give a certificate to a domain pc. >> > I have a W2K3 domain, the pc is W2K SP4. >> > in the logs there is nothing wrong with DNS. >> > Tried to kick te pc out of the domain and back, nothing changed. >> > Removed CA and reinstalled, nothing changed. >> > Something strange when I follow procedure for configuring aut. cert. >> > alloc., >> > after selecting the computer out of the templates, I won't get the >> > enterprise >> > ROOT CA, just window with name and computer. >> > Is this the cause of the above problem? What can I do to solve this >> > problem. >> > >> > Thank you. >> ></span> >> >> </span></span> Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.