Article ID: 171140 - Last Review: June 23, 2005 - Revision: 3.1

Permission Denied During Certificate Creation

Retired KB ArticleRetired KB Content Disclaimer
View products that this article applies to.
System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
This article was previously published under Q171140
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:
http://www.microsoft.com/technet/security/prodtech/IIS.mspx (http://www.microsoft.com/technet/security/prodtech/IIS.mspx)
Expand all | Collapse all

SYMPTOMS

When you try to create a client certificate for Microsoft Internet Explorer through the Microsoft Internet Explorer Enrollment Form, you may get an error message similar to the following:
Microsoft VBScript runtime error '800a0046'
Permission denied
/CertSrv/CertEnroll/ceaccept.asp, line 10
Back to the top

CAUSE

The IUSR_computername account does not have access to the Certificate Server shared folder.
Back to the top

RESOLUTION

Give the IUSR_computername account Read access to the shared folder, and the certificates will be issued properly.
Back to the top

MORE INFORMATION

If the anonymous account (or logged-in user) does not have at least Read access to the Well Known Directory, the certificate generation process will fail. An error message will be returned, formatted as an HTML document.

The Well Known Directory is the name given to the shared folder required by the Certificate Server Setup program. This share contains information specific to the Self-Signed Certificate (Root CA).
Back to the top
APPLIES TO
  • Microsoft Certificate Server 1.0
  • Microsoft Internet Information Server 3.0
Back to the top
Keywords: 
kberrmsg kbother kbprb KB171140
Back to the top
Retired KB ArticleRetired KB Content Disclaimer
This article was written about products for which Microsoft no longer offers support. Therefore, this article is offered "as is" and will no longer be updated.
Back to the top