certificate Services will not startup on specified port

[Billy]

Hello All,
I hope you can help:

I keep seeing errors when I setup a Enterprise CA. The Certsvc
request
is configured in component services to utilize port 2000 (lets say),
and rpc ports are restricted to a range of ports. (usually 100
ports are allocated). However, The CA process is usually found on a
port in the rpc range
instead of being on the port specifically allocated to it (2000).


This causes Autoenrollment of certificates to not occur unless i
reset
the configuration in component services to default.


Upon further investigation, i found that the DHCP server service
loves
to
grab the 2000 port, and this then forces forces the CA service to
take a port within the rpc range. The
question becomes: Can I force the CA to always grab port 2000 before
anything else takes it?


thanks in advance.

 

[Brian Komar \(MVP\)]

why are you changing the default configuration?
What risk are you trying to mitigate.
You mention that the configuration works when running in the default
configuration.
Why change something that works?
Brian

"Billy" <BillyRycroft@gmail.com> wrote in message
news:15244f4b-f4fb-4be3-ad67-ccb71c093d44@r66g2000hsg.googlegroups.com...
> Hello All,
> I hope you can help:
>
> I keep seeing errors when I setup a Enterprise CA. The Certsvc
> request
> is configured in component services to utilize port 2000 (lets say),
> and rpc ports are restricted to a range of ports. (usually 100
> ports are allocated). However, The CA process is usually found on a
> port in the rpc range
> instead of being on the port specifically allocated to it (2000).
>
>
> This causes Autoenrollment of certificates to not occur unless i
> reset
> the configuration in component services to default.
>
>
> Upon further investigation, i found that the DHCP server service
> loves
> to
> grab the 2000 port, and this then forces forces the CA service to
> take a port within the rpc range. The
> question becomes: Can I force the CA to always grab port 2000 before
> anything else takes it?
>
>
> thanks in advance.
>
>