Due to Active Directory Certificate Services service in Windows Server 2008 R2 limitations

Oct 25, 2011 09:29 GMT  ·  By

Early adopters testing Windows 8 Developer Preview can come across issues with cross-forest certificate enrollment requests failing, Microsoft confirmed.

The software giant noted that the problem has been experienced by customers leveraging Active Directory Certificate Services service in Windows Server 2008 R2.

According to the Redmond company, the glitch is caused by a limitation of the Active Directory Certificate Services.

Having identified the source of the problem, Microsoft also provided some details designed to let customers know if they’re affected.

“You install the Active Directory Certificate Services role on a computer that is running Windows Server 2008 R2. There is a computer that is running Windows 8 and has Direct Access deployed,” the company said.

“The computer that is running Windows 8 is from another Active Directory forest and is configured to obtain certificates from the Windows Server 2008 R2 computer. In this scenario, the certificate enrollment fails on the computer that is running Windows 8.”

At the time of this article, Microsoft was yet to provide an update designed to permanently deal with this issue.

However, the software giant has taken the necessary measures to ensure that affected customers can deal with the problem.

A hotfix is available for download from Microsoft Support, designed to let the Active Directory Certificate Services service in Windows Server 2008 R2 handle cross-forest certificate enrollment requests from a Windows 8 machine.

“This issue occurs because of a limitation of the Active Directory Certificate Services service,” the software giant explained.

The hotfix needs to be deployed in either Windows Server 2008 R2 or Windows Server 2008 R2 Service Pack 1(SP1), depending on the server OS that customers are running.

According to Microsoft, this particular fix will find its way into the second service pack for Windows server 2008 R2.