If your subordinate CA's signing certificate has expired, then you need to get 
that renewed by your root CA.

Is that the issue? If so, have you tried renewing the sub CA's signing cert? If 
so, what was the error you have received?

Cheers
Ken

From: Troy Adkins [mailto:[email protected]]
Sent: Thursday, 12 January 2012 8:41 PM
To: NT System Admin Issues
Subject: Re: Renewing a Sub-CA certificate

On my IAS server:

"A certification chain processed correctly, but one of the CA certificates is 
not trusted by the policy provider".

Troy Adkins
Network Administrator
Virginia House of Delegates
General Assembly Bldg. Room 815
804.698.1567 (O)
804.771.7917 (F)
[email protected]<mailto:[email protected]>
http://legis.virginia.gov<http://legis.virginia.gov/>



From:        William Robbins <[email protected]<mailto:[email protected]>>
To:        "NT System Admin Issues" 
<[email protected]<mailto:[email protected]>>
Date:        01/11/2012 11:29 PM
Subject:        Re: Renewing a Sub-CA certificate
________________________________



So...what's in the event log on the sub CA?

 - WJR


On Wed, Jan 11, 2012 at 18:30, Troy Adkins 
<[email protected]<mailto:[email protected]>> wrote:
I have an Enterprise CA and 2 Sub-CA's.

One domain has the Enterprise CA, the other 2 domains have the Sub-CA's.

One Sub CA certificate in one domain has expired.  I can't seem to get it 
renewed.  What am I missing?

The cert is used for wireless access certificate.  I can authenticate with a 
user cert or a computer cert.

Troy Adkins
Network Administrator
Virginia House of Delegates
General Assembly Bldg. Room 815
804.698.1567<tel:804.698.1567> (O)
804.771.7917<tel:804.771.7917> (F)
[email protected]<mailto:[email protected]>
http://legis.virginia.gov<http://legis.virginia.gov/>
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to