When users request certificates from a Windows Server 2003-based Certificate Authority (CA), why does the CA prompt them to download an ActiveX control?
John Savill
May 22, 2003
1 Min Read
A. Windows 2003 includes a new version of xenroll.dll (an ActiveX control that can create certificates) that prompts users of previous Windows versions to download an ActiveX control when requesting a certificate. To resolve this problem, go to the Windows 2003 certificate server and perform the following steps:
Log on as an Administrator.
Open %systemroot%system32certsrvcertdat.inc in a text editor.
Locate the sXEnrollVersion="5,131,3686,0" entry, then modify the entry to
sXEnrollVersion="5,131,3659,0"
Save the changes, then close the text editor.
About the Author
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
You May Also Like