Certification Authority 0x8009480f error

[Benny Huyghe]

Certification Authority 0x8009480f error : the dns name is unavailable and
cannot b e added to the subjectalternatename.
This error I get all the time when automatic certificate allocation wants to
give a certificate to a domain pc.
I have a W2K3 domain, the pc is W2K SP4.
in the logs there is nothing wrong with DNS.
Tried to kick te pc out of the domain and back, nothing changed.
Removed CA and reinstalled, nothing changed.
Something strange when I follow procedure for configuring aut. cert. alloc.,
after selecting the computer out of the templates, I won't get the enterprise
ROOT CA, just window with name and computer.
Is this the cause of the above problem? What can I do to solve this problem.

Thank you.

 

[Brian Komar \(MVP\)]

I have no idea what you are asking
I need more details
Brian

"Benny Huyghe" <BennyHuyghe@discussions.microsoft.com> wrote in message
news:63AAC865-E0CA-4F92-9B10-851F8BE3EBDD@microsoft.com...
> Certification Authority 0x8009480f error : the dns name is unavailable and
> cannot b e added to the subjectalternatename.
> This error I get all the time when automatic certificate allocation wants
> to
> give a certificate to a domain pc.
> I have a W2K3 domain, the pc is W2K SP4.
> in the logs there is nothing wrong with DNS.
> Tried to kick te pc out of the domain and back, nothing changed.
> Removed CA and reinstalled, nothing changed.
> Something strange when I follow procedure for configuring aut. cert.
> alloc.,
> after selecting the computer out of the templates, I won't get the
> enterprise
> ROOT CA, just window with name and computer.
> Is this the cause of the above problem? What can I do to solve this
> problem.
>
> Thank you.
>

 

[Benny Huyghe]

Sorry that I wasn't clear.
I was following the doc Ethernet Switch Access with IAS :
http://technet2.microsoft.com/windowsserver/en/library/f2b766ef-bc4f-4765-b105-fe0b538caf191033.mspx

Here I saw that I needed configure automatic certificate allocation from an
enterprise CA :
http://technet2.microsoft.com/windo...78c0-4f50-9c15-4beecf5129161033.mspx?mfr=true

Although I followed the procedure and got no error message, the problem is
that my client pc doesn't get the certificate.

I open the Certificate Authority, go to failed requests and get this message:
0x8009480f error : the dns name is unavailable and cannot be added to the
subject alternate name : denied by policy module

resubmit failed too.

I hope this helps.


"Brian Komar (MVP)" wrote:

> I have no idea what you are asking
> I need more details
> Brian
>
> "Benny Huyghe" <BennyHuyghe@discussions.microsoft.com> wrote in message
> news:63AAC865-E0CA-4F92-9B10-851F8BE3EBDD@microsoft.com...
> > Certification Authority 0x8009480f error : the dns name is unavailable and
> > cannot b e added to the subjectalternatename.
> > This error I get all the time when automatic certificate allocation wants
> > to
> > give a certificate to a domain pc.
> > I have a W2K3 domain, the pc is W2K SP4.
> > in the logs there is nothing wrong with DNS.
> > Tried to kick te pc out of the domain and back, nothing changed.
> > Removed CA and reinstalled, nothing changed.
> > Something strange when I follow procedure for configuring aut. cert.
> > alloc.,
> > after selecting the computer out of the templates, I won't get the
> > enterprise
> > ROOT CA, just window with name and computer.
> > Is this the cause of the above problem? What can I do to solve this
> > problem.
> >
> > Thank you.
> >
>
>

 

[Brian Komar \(MVP\)]

In Active Directory, check the properties of the client PC.
The PC's DNS name attribute is empty, and the CA is unable to populate the
SAN with the DNS name
Input the DNS name, and the request should succeed.
Brian

"Benny Huyghe" <BennyHuyghe@discussions.microsoft.com> wrote in message
newsD90320D-E1EA-4384-BD6C-B7B530472BDF@microsoft.com...
> Sorry that I wasn't clear.
> I was following the doc Ethernet Switch Access with IAS :
> http://technet2.microsoft.com/windowsserver/en/library/f2b766ef-bc4f-4765-b105-fe0b538caf191033.mspx
>
> Here I saw that I needed configure automatic certificate allocation from
> an
> enterprise CA :
> http://technet2.microsoft.com/windo...78c0-4f50-9c15-4beecf5129161033.mspx?mfr=true
>
> Although I followed the procedure and got no error message, the problem is
> that my client pc doesn't get the certificate.
>
> I open the Certificate Authority, go to failed requests and get this
> message:
> 0x8009480f error : the dns name is unavailable and cannot be added to the
> subject alternate name : denied by policy module
>
> resubmit failed too.
>
> I hope this helps.
>
>
> "Brian Komar (MVP)" wrote:
>
>> I have no idea what you are asking
>> I need more details
>> Brian
>>
>> "Benny Huyghe" <BennyHuyghe@discussions.microsoft.com> wrote in message
>> news:63AAC865-E0CA-4F92-9B10-851F8BE3EBDD@microsoft.com...
>> > Certification Authority 0x8009480f error : the dns name is unavailable
>> > and
>> > cannot b e added to the subjectalternatename.
>> > This error I get all the time when automatic certificate allocation
>> > wants
>> > to
>> > give a certificate to a domain pc.
>> > I have a W2K3 domain, the pc is W2K SP4.
>> > in the logs there is nothing wrong with DNS.
>> > Tried to kick te pc out of the domain and back, nothing changed.
>> > Removed CA and reinstalled, nothing changed.
>> > Something strange when I follow procedure for configuring aut. cert.
>> > alloc.,
>> > after selecting the computer out of the templates, I won't get the
>> > enterprise
>> > ROOT CA, just window with name and computer.
>> > Is this the cause of the above problem? What can I do to solve this
>> > problem.
>> >
>> > Thank you.
>> >
>>
>>