NDES could not be installed

[former_member197903]

Hello All,

I followed the URL to re-install NDES service.

But i get the below error. We use Entrust certificate.

Environment: Afaria 7 SP04 HF19

Windows 2008 R2 x64

Please suggest.

Regards,
VP

[former_member197903]

Anyone faced this issue earlier?

Regards,

VP

[Former Member]

Looping to provide better insight on the issue.

Kind Regards,

Sushmitha

[tracy_barkley]

VP,

Is your Entrust CA a cloud or on prem install?  NDES is a MS CA feature, not for the Entrust CA itself.   This is iOS, correct?  Has it worked prior?

Also I have noted you are on SP4 Hot Fix 19.  This code level does not support Entrust CAs.  You will need to update to at least SP8 to add the Entrust support. 

Tracy

[Former Member]

Dear VP,

Did you try the same steps on how to re-install NDES services as mentioned in the WIKI SCEP Server Configuration is not supported error when trying to provision an iOS device - SAP Mobili...

If not, please give a try on performing these steps and see if you still get the same error.

Kind Regards,
Sushmitha

[former_member197903]

Hi Sushmitha,

Thank you for your reply.

We use Entrust certificate, I do not see this below option in regedit.

1.Open Start Menu and Type Regedit to open the Registry Edit Console.

2. In the console browse to HKLM\Software\Microsoft\Cryptography\MSCEP\EnforcePassword\EnforcePassword

3. Change the registry key to 0.

Regards,

VP

[former_member197903]

Hello Sushmitha and All,

I already followed the steps from the provided link but still i get the same error.

Regards,
VP

[Former Member]

Dear VP,

Seems like the user account you specified doesn't have the proper rights to enroll the CA.

Please take a look at this support notes https://support.sap.com/notes/2054235 for the resolution.https://support.sap.com/notes/2054235

This should help you to resolve the issue. Let me know the outcome.

Kind Regards,

Sushmitha

[former_member197903]

You have given me the document for Microsoft CA, is it applicable for Entrust? because i do not see certsrv option.

[former_member197903]

Can anyone please update me on this issue?