Article ID: 833704 - View products that this article applies to.
When you request a certificate for your Microsoft Internet Security and Acceleration (ISA) Server 2004 computer by using the Microsoft Management Console (MMC) Certificates snap-in on the ISA Server computer, you receive the following error message:
This issue occurs even after you verify that the Certification Authority is started and that you have sufficient permissions to request a certificate.
The certificate request failed because of one of the following conditions:
- the certificate request was submitted to a Certification Authority (CA) that is not started.
- You do not have the permissions to request certificates from the available CAs.
This issue occurs because, by default, ISA Server enforces strict remote procedure call (RPC) compliance on all firewall rules. To request a certificate for the ISA Server computer, you must modify the firewall policy. This is the expected behavior in ISA Server 2004.
To resolve this issue, modify the system policy in ISA Server 2004 to permit DCOM network traffic from the ISA Server computer to the certification authority. To do this, follow these steps:
To request a certificate for the ISA Server computer, click to clear the Enforce strict RPC compliance check box in the System Policy Editor dialog box. However, to request a certificate for a client computer when the client computer and the Certification Authority are on different networks, you do not have to modify the system policy on the ISA Server computer. In this scenario, you must modify the strict RPC-compliance settings for the rule or rules that permit traffic between the two networks. To do this, follow these steps: