certification microsoft

#SendFeedback_tr{display:none;}How to use Certificate Services Web enrollment pages together with Windows Vista or Windows Server 2008 body { background:url('/library/images/support/cn/gsfx_brnd_gn_top_bgrd.gif') repeat-x #C8E3F1; } #gsfx_brnd_PageContainer { background:url('') no-repeat fixed top center transparent; } .gsfx_brnd_NetworkLink, .gsfx_brnd_NetworkLink:visited, .gsfx_brnd_NetworkLink a, .gsfx_brnd_NetworkLink a:visited { color: #cdcbce; } .gsfx_brnd_NetworkLink:hover, .gsfx_brnd_NetworkLink:active, .gsfx_brnd_NetworkLink:focus, .gsfx_brnd_NetworkLink a:hover, .gsfx_brnd_NetworkLink a:active, .gsfx_brnd_NetworkLink a:focus { color: #f9d060; border-bottom-color: #f9d060; } #gsfx_brnd_NetworkHeader, #gsfx_brnd_NetworkHeaderLinks { color: #ffffff; } #gsfx_brnd_SiteHeader, #gsfx_brnd_PageLogoWrapper, #gsfx_brnd_PageTitle { color: #ffffff; } #gsfx_brnd_SiteFooter, #gsfx_brnd_SiteFooterWrap { color: #ffffff; } #gsfx_brnd_NetworkFooter, #gsfx_brnd_FooterLinkContainerm, #gsfx_brnd_FooterLinkContainer span, #gsfx_brnd_copyright_container, #gsfx_brnd_copyright_container span { color: #ffffff; } #gsfx_brnd_PageContainer {background:none;} #gsfx_brnd_PageHeaderImage {filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='', sizingMethod='image');} #gsfx_brnd_PageLogo {display:none;} #gsfx_brnd_legacy_PageLogo {filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='/library/images/support/cn/gsfx_brnd_ms_logo.png', sizingMethod='image');} #gsfx_brnd_MSLogo {visibility:hidden;} #gsfx_brnd_legacy_MSLogo {filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='/library/images/support/cn/gsfx_brnd_ms_logo_sml_wht.png', sizingMethod='image');} United States Change | All Microsoft Sites Help and Support Help and Support Home|Select a Product|Advanced Search How to use Certificate Services Web enrollment pages together with Windows Vista or Windows Server 2008View products that this article applies to.Article ID:922706Last Review:April 2, 2008Revision:11.0On This Page.toc{display: none;}SUMMARYThe Windows Server 2003 Certificate Services Web enrollment functionality relies on an ActiveX control that is named Xenroll. This ActiveX control is available in Microsoft Windows 2000 and in later versions of Windows. However, Xenroll has been deprecated in Windows Vista and in Windows Server 2008. The sample certificate enrollment Web pages that are included with the original release version of Microsoft Windows Server 2003, with Windows Server 2003 Service Pack 1 (SP1), and with Windows Server 2003 Service Pack 2 (SP2) are not designed to handle the change in how Windows Vista and Windows Server 2008 perform Web-based certificate enrollment operations.Back to the topINTRODUCTIONThis article discusses how to use Certificate Services Web enrollment pages together with Windows Vista or Windows Server 2008.Back to the topMORE INFORMATIONNote The Windows Server 2008 Certificate Web Enrollment pages are available as a hotfix. These files support certificate Web enrollment from Server 2008 clients and from Vista clients (Certenroll). These files also support certificate Web enrollment from Windows XP clients and from Server 2003 clients (Xenroll). To install these pages, download the hotfix and then follow the instructions that are provided later in this article. For more information, visit the following Microsoft TechNet Web site:http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx (http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx) The following files are available for download from the Microsoft Download Center:Update for x86 version of Windows Server 2003http://www.microsoft.com/downloads/details.aspx?FamilyId=FFAEC8B2-99E0-427A-8110-2F745059A02D (http://www.microsoft.com/downloads/details.aspx?FamilyId=FFAEC8B2-99E0-427A-8110-2F745059A02D)Update for x64 version of Windows Server 2003http://www.microsoft.com/downloads/details.aspx?FamilyId=B9E1A5F2-A09C-421C-84D6-BFDDBF587D64 (http://www.microsoft.com/downloads/details.aspx?FamilyId=B9E1A5F2-A09C-421C-84D6-BFDDBF587D64)Update for Itanium version of Windows Server 2003http://www.microsoft.com/downloads/details.aspx?FamilyId=511014E2-9717-458E-9318-77DC38D20147 (http://www.microsoft.com/downloads/details.aspx?FamilyId=511014E2-9717-458E-9318-77DC38D20147)Certificate Services is available on computers that are running the following operating systems:•Microsoft Windows Server 2003, Standard Edition•Microsoft Windows Server 2003, Enterprise Edition•Microsoft Windows Server 2003, Datacenter Edition•Microsoft Windows Server 2008Certificate Services provides customizable services to issue and to manage certificates for use with software security systems that use public key technology. Windows Certificate Services includes a set of certification authority (CA) Web pages. These Web pages provide a simple user interface to perform many of the common user tasks in the certification authority. These Web enrollment pages let you use a Web browser to connect to the certification authority. You can use the Web browser to perform common tasks, such as requesting a certificate, requesting the certification authority certificate, submitting a certificate request by using a PKCS #10 file, and so on.Certificate enrollment Web pages are especially helpful in a scenario where the client computer cannot connect to the certification authority directly. You may experience this scenario in an environment where the client computer is not a member of the domain or where the certification authority is located in a different Active Directory directory service forest.The certificate enrollment Web pages are included as an optional component in the original release version of Windows Server 2003, in Windows Server 2003 Service Pack 1 (SP1), and in Windows Server 2003 Service Pack 2 (SP2). These Web pages include a script that is based on the Xenroll ActiveX control. When you visit the certificate enrollment Web site, the client computer automatically downloads and installs the correct version of Xenroll if the correct version of Xenroll is not already installed. Windows Vista and Windows Server 2008 do not use Xenroll. Instead, Windows Vista and Windows Server 2008 use a set of dual interface Component Object Model (COM) objects. This set of COM objects is known as CertEnroll. Xenroll is disabled in Windows Vista and in Windows Server 2008. Therefore, if you try to manually install Xenroll, the installation is unsuccessful. Windows Server 2008 includes updated sample Web pages for Web-based certificate enrollment operations. These Web pages are updated to work together with the CertEnroll component in Windows Vista. Additionally, these Web pages work together with Xenroll.Back to the topWindows Server 2008 certificate enrollment Web pagesWindows Server 2008 includes updated sample Web pages for Web-based certificate enrollment operations. These Web pages are updated to work together with the CertEnroll component in Windows Vista. Additionally, these Web pages work together with Xenroll.The certificate enrollment Web pages in Windows Server 2008 are designed to detect the client operating system and to then use the appropriate control. If the client computer is running Windows Server 2003 or Microsoft Windows XP, the certificate enrollment Web pages use Xenroll. If the client computer is running Windows Vista or Windows Server 2008, the certificate enrollment Web pages use CertEnroll.Note The Windows Vista certificate enrollment client component has been enhanced over that of earlier versions of Windows. Some of the functionality that was formerly accessed by using Web pages is now included in the client component. Therefore, this functionality has been removed from the updated certificate enrollment Web pages. Functionality that has been removed includes the following:•The Enroll on Behalf of operationAn enrollment agent uses this feature to enroll for a certificate on behalf of another user.•Computer certificate enrollmentAdministrative rights are required to request a computer certificate. In Windows Vista, Microsoft Internet Explorer does not use administrative rights to run. Therefore, the option to store a computer certificate in the computer store was removed from the Windows Server 2008 certificate enrollment pages. • The Xenroll .cab fileIf a client computer has an earlier version of Xenroll installed, the client is not prompted to upgrade to the latest version of Xenroll.•The whole range of locales for the Web pagesCertain localized versions of the certificate enrollment Web pages may not be available until Windows Server 2008 is released.Back to the topWindows Server 2003 and Windows Server 2003 SP1 certificate enrollment Web pagesWindows Server 2003 and Windows Server 2003 SP1 certificate enrollment Web pages do not contain code to detect the certificate enrollment changes in Windows Vista and in Windows Server 2008. Therefore, these Web pages always try to use Xenroll. Therefore, when you try to perform a Web-based certificate enrollment operation from Windows Vista or from Windows Server 2008, the certificate enrollment operation is unsuccessful. In this scenario, you receive the following message in the Web browser window:Downloading ActiveX control.Back to the topWindows Server 2003 SP2 certificate enrollment Web pagesWindows Server 2003 SP2 certificate enrollment Web pages have been updated to detect the certificate enrollment changes in Windows Vista and in Windows Server 2008. However, because of the different release dates for Windows Server 2003 SP2, for Windows Vista, and for Windows Server 2008, Windows Server 2003 SP2 certificate enrollment Web pages do not recognize the CertEnroll interfaces. Therefore, if you visit the certificate enrollment Web site by using a computer that is running Windows Vista or Windows Server 2008, you receive a message that states that the Web pages must be updated.Back to the topInteroperability tableThe following table illustrates the interoperability between the various versions of the certificate enrollment Web pages and the various Windows-based client computers.Windows Server 2003 and Windows Server 2003 SP1Windows Server 2003 SP2Windows Server 2008Client computers that are earlier than Windows VistaSupportedSupportedSupported but with reduced functionalityWindows Vista-based client computersUnsuccessful together with a "Downloading ActiveX control" messageUnsuccessful together with a message that states that the Web pages must be updatedSupportedImportant We recommend that you back up the %systemroot%\System32\Certsrv folder before you install the updated Web pages. The installation process causes updates and deletions to files in this folder that may cause you to lose customizations and additions. After you finish the backup process, follow the installation instructions on the download page for the update package.Back to the topAPPLIES TO•Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)•Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems•Microsoft Windows Server 2003, Enterprise x64 Edition•Microsoft Windows Server 2003, Standard Edition (32-bit x86)•Microsoft Windows Server 2003, Standard x64 Edition•Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)•Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems•Microsoft Windows Server 2003, Datacenter x64 Edition•Windows Vista Starter•Windows Vista Home Basic•Windows Vista Home Premium•Windows Vista Ultimate•Windows Vista Business•Windows Vista Enterprise•Windows Vista Enterprise 64-bit Edition•Windows Server 2008 Datacenter without Hyper-V•Windows Server 2008 Enterprise without Hyper-V•Windows Server 2008 for Itanium-Based Systems•Windows Server 2008 Standard without Hyper-V•Windows Server 2008 Datacenter•Windows Server 2008 Enterprise•Windows Server 2008 Standard•Windows Web Server 2008Back to the topKeywords:В kbhowto kbenv kbinfo KB922706Back to the topArticle TranslationsArabicFrenchGermanItalianJapanesePortuguese (Brazil)Portuguese (Portugal)Simplified ChineseSpanishTraditional Chinese Related Support CentersWindows Server 2003Windows VistaWindows Vista EnterpriseWindows Server 2008Other Support OptionsContact MicrosoftPhone Numbers, Support Options and Pricing, Online Help, and more.Customer ServiceFor non-technical assistance with product purchases, subscriptions, online services, events, training courses, corporate sales, piracy issues, and more.NewsgroupsPose a question to other users. Discussion groups and Forums about specific Microsoft products, technologies, and services.Page ToolsPrint this pageE-mail this page Help and Support Services Agreement Contact Us|Terms of Use|Trademarks|Privacy Statement ©2008 Microsoft #gsfx_brnd_CenterContent, #gsfx_brnd_PageWrapper { background: url('/library/images/support/cn/gsfx_brnd_gn_bottom_bgrd.png') repeat-x bottom; } #gsfx_brnd_SiteFooter img { display:none; } #gsfx_brnd_SiteFooter { filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='', sizingMethod='crop'); margin-top:8px; } разделы поставка тройник бордюр обоев программа шифрование договор суррогатный мать полноцвет кружок снегоуборочный машина роль ставень автошкола корпаративные праздник купить видеокарту клеить нанесение нужный билет телематические служба затенение витрина вытяжка билет russia music awards сенсорный экран катушка контактор профессиональный психолог помещение шиномонтаж вытяжка кулер 754 электрокардиограф бестраншейный облицовка спецобувь заказ затенение витрина холодильник дешево лечение иглоукалыванием распыление ароматизатор вышитый герб квантовый медицина корпаративные вечеринка кулер процессорный меховой холодильник лад tognana фарфор авиа отправка разогреть вчерашний обед kyiv apartaments service договор суррогатный мать доставка канцелярия пежо 407 эфирный антенна locus нард online колокейшн протеин пбоюл конвейер шнековый купить аудиоплееры зона ограничение доступ доставка ноутбук sky link анкетирование цвет камуфлир профессиональный видеосъемка бахила производитель телематические служба многотарифные электросчетчик электромонтажный стол кружка любимый цвет надевание бахила маска косметический магнитный решетка огнестойкий краска телевизионный антенна прайс эфирный антенна 5440.15 (крышка) итальянский вина nokia 3230 купить protherm протеин краска двухкомпонентный электротельфер миканитовые втулка ливнесборные решетка мустанг лазер установка hotbird промальп укв радиосвязь ларсен центр компания петрокатридж предохранитель пкэ фотопечать время кострома ножной пластырь пвс лотерея заказ обед тонирование стекла витрина мороженый букмекерский контора фаворит акриловый вставка вкладыш универсам красный площадь тонировка метрореклама нижнийновгород жаропрочный фарфор revol облицовка bella italia отпуск конец центр проктология ножной пластырь холодильник оптом витрина подогреваемый дирижабль ожирение танго кэш витрина подогреваемый теннисный ракетка купить ниппель перех кострома риелтор купить конденсатоотвод узи тошиба штукатурка фасадный программа шифрование summer кухонный купить широкоугольник protherm лад санфаянс k610 купить дружкова кружка газонокосилка stiga кайт серфинг поливомоечная машина катушка контактор арманьяк доставка агат кристи билет горячий обед фасадный покрытие подшипниковый узел бюджетирование дезинфекция белье квн съемка вышивка флаг антенна кислотостойкий краска ppg краска клеить нанесение басейны intex герб рф органический растворитель перевод денег клеить 88 люкс доставка кулеров видеорегистраторы лад факультет психология позитивный психология рак пищевод пвс электроинструмент метабо ваза 2112 выделенка застежка zip-lock кулер винчестер подготовка ielts 5440.13 (крышка) квн съемка эрозия шейка матка контейнерный автозаправка штангенциркуль подбор контрацепция доставка алкогольный люминисцентная краска кайт архыз 8800 gold лечение папиллома серверные корпус консольный переключатель телефонный обзвон встраиваемый вытяжка 8800 gold 5440.15 (крышка) магнитный решетка certification microsoft