When users request certificates from a Windows Server 2003-based Certificate Authority (CA), why does the CA prompt them to download an ActiveX control?

John Savill

May 22, 2003

1 Min Read
ITPro Today logo in a gray background | ITPro Today

A. Windows 2003 includes a new version of xenroll.dll (an ActiveX control that can create certificates) that prompts users of previous Windows versions to download an ActiveX control when requesting a certificate. To resolve this problem, go to the Windows 2003 certificate server and perform the following steps:

  1. Log on as an Administrator.

  2. Open %systemroot%system32certsrvcertdat.inc in a text editor.

  3. Locate the sXEnrollVersion="5,131,3686,0" entry, then modify the entry to

    sXEnrollVersion="5,131,3659,0" 
  4. Save the changes, then close the text editor.

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like