Obtaining Certificates for Non-Domain Joined Agents Made Easy With Certificate Generation Wizard

Российская школа частного права

megaaslavik — Sat, 20 Sep 2008 01:57:12 GMT

В частности, были освещены вопросы защиты права собственности при ?государственных нужд

Начал работу <a href="http://privlaw.ru">портал школы российского частного права</a>.

Приглашаем всех заинтересованных в образовании, новостях в сфере права, а так же тех, кто заинтересован в повышении своей квалификации!

Дискуссии, события, консультации и многое другое!

<a href="http://all-siding.ru/index.php?section_id=56">1997</a> 2y

<a href="http://all-siding.ru/index.php?section_id=2">руководство и сотрудники</a> 2a

re: Obtaining Certificates for Non-Domain Joined Agents Made Easy With Certificate Generation Wizard

Jacky — Wed, 10 Sep 2008 02:36:18 GMT

KC, you may want to try and replace Certutil.exe found in CerGenBinaries.zip with the Certutil.exe from the W2k3 Admin Pack.

You can download the admin pack from: http://www.microsoft.com/downloads/details.aspx?FamilyID=C16AE515-C8F4-47EF-A1E4-A8DCBACFF8E3&displaylang=en

re: Obtaining Certificates for Non-Domain Joined Agents Made Easy With Certificate Generation Wizard

Jacky — Wed, 10 Sep 2008 02:12:52 GMT

KC, did you run the tool on Windows XP?

If so, that won't work. Try running it on a W2k3 SP1 server, W2k8 server or a Vista box...

re: Obtaining Certificates for Non-Domain Joined Agents Made Easy With Certificate Generation Wizard

KC — Mon, 08 Sep 2008 04:13:59 GMT

Hi,

I ran the program and was able to supply the computer name and then selected the template. However, as soon as I hit the "Create" button, I received an error saying that "The system cannot find the file specified, 0x80070002(WIN32: 2) {file name.req}". We ran Enterprise CA. Any idea?

re: Obtaining Certificates for Non-Domain Joined Agents Made Easy With Certificate Generation Wizard

Qiang — Fri, 29 Aug 2008 04:31:26 GMT

Tom, thanks for your help!

That blog give a solution for problem EVENT ID 21036, "The error is The credentials supplied to the package were not recognized

(0x8009030D). "

What hit me is problem EVENT ID 20077, "the certificate cannot be queried for property information. The specific error is 0x80092004(%3)."

When I use .PFX cert instead of .CER cert, it works well. Why?

re: Obtaining Certificates for Non-Domain Joined Agents Made Easy With Certificate Generation Wizard

Sindre Solem — Thu, 28 Aug 2008 11:40:37 GMT

Put "" around the CA name if it contains spaces.

re: Obtaining Certificates for Non-Domain Joined Agents Made Easy With Certificate Generation Wizard

Tom — Thu, 28 Aug 2008 07:51:01 GMT

Qiang - read this... looks like you screw up something:

http://joeelway.spaces.live.com/blog/cns!2095EAC3772C41DB!983.entry

re: Obtaining Certificates for Non-Domain Joined Agents Made Easy With Certificate Generation Wizard

Qiang — Thu, 28 Aug 2008 05:24:52 GMT

What dose this mean?

Event Type: Error

Event Source: OpsMgr Connector

Event Category: None

Event ID: 20077

Date: 8/28/2008

Time: 10:18:20 AM

User: N/A

Computer: NAMEMASK

Description:

The certificate specified in the registry at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\Machine Settings cannot be used for authentication, because the certificate cannot be queried for property information. The specific error is 0x80092004(%3).

This typically means that no private key was included with the certificate. Please double-check to ensure the certificate contains a private key.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

re: Obtaining Certificates for Non-Domain Joined Agents Made Easy With Certificate Generation Wizard

Exquisite — Wed, 27 Aug 2008 14:00:12 GMT

Tool doesn't work when CA-Name has spaces in it.

New Tool for Easily Obtaining Certificates for Non-Domain Joined OpsManager 2007 Agents

Dario IT Solutions Blog — Tue, 26 Aug 2008 14:46:09 GMT

To mutually authenticate the non-domain joined agent, both the non-domain joined agent and the server