If you are using this purely for studies for the CCIE Security exam you are
wasting your time. Microsoft CA is no longer covered by the Security Exam.
YOu need to spend your time on PKI.
Regards,
Tyson Scott - CCIE #13513 R&S, Security, and SP
Managing Partner / Sr. Instructor - IPexpert, Inc.
Mailto: tscott_at_ipexpert.com
-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of Ryan
West
Sent: Sunday, August 08, 2010 3:21 PM
To: Mahdi Elghafri; Cisco certification; Cisco certification
Subject: RE: win2k3 scep problem
Mahdi,
> -----Original Message-----
> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On
> Behalf Of Mahdi Elghafri
> Sent: Sunday, August 08, 2010 3:07 PM
> To: Cisco certification; Cisco certification
> Subject: win2k3 scep problem
>
> hi group
>
> am using IE Vol 1 for Security .. my hardware emulated using
> Dynamips/PEMU
>
> i have connected a real PC that has win server 2003 to act as a CA
server...
> however, when i try to get the CA Certificate on the PIX.. i get no
response
> from the CA
>
> i searched on the internet and found that i have to install an add-on to
> enable the scep on win2k3 ... "cepsetup.exe" specifically...
>
> still.. the pix firewall and so the IOS cannot get any response from the
CA... i
> did packet capture.. found that the pix issue this http command:
>
> GET /certserv/mscep/mscep.dll/operation=GetCACert message=XXXX
>
> however, the response from the server is simply a 404 error.. which is
file not
> found...
>
> did anybody experienced the same problem before? or did anybody
> successfuly managed to work on dynamips and solve the vol 1 labs
>
Do you have IIS properly configured on the CA and is your CRL being
published.
Might want to check out this link as well:
http://www.microsoft.com/downloads/details.aspx?familyid=9f306763-d036-41d8-
8860-1636411b2d01&displaylang=en#AdditionalInfo
-ryan
Blogs and organic groups at http://www.ccie.net
Received on Sun Aug 08 2010 - 17:38:09 ART
This archive was generated by hypermail 2.2.0 : Wed Sep 01 2010 - 11:20:52 ART