Permission Denied During Certificate Creation

 Last reviewed: November 19, 1997
Article ID: Q171140

The information in this article applies to:

  • Microsoft Certificate Server version 1.0
  • Microsoft Internet Information Server version 3.0

SYMPTOMS

When you try to create a client certificate for Microsoft Internet Explorer through the Microsoft Internet Explorer Enrollment Form, you may get an error message similar to the following: 

   Microsoft VBScript runtime error '800a0046'
   Permission denied
   /CertSrv/CertEnroll/ceaccept.asp, line 10

CAUSE

The IUSR_computername account does not have access to the Certificate Server shared folder.

RESOLUTION

Give the IUSR_computername account Read access to the shared folder, and the certificates will be issued properly.

MORE INFORMATION

If the anonymous account (or logged-in user) does not have at least Read access to the Well Known Directory, the certificate generation process will fail. An error message will be returned, formatted as an HTML document.

The Well Known Directory is the name given to the shared folder required by the Certificate Server Setup program. This share contains information specific to the Self-Signed Certificate (Root CA). 

Keywords          : iisconfig kberrmsg kbother
Version           : WinNT:1.0,3.0
Platform          : winnt
Hardware          : ALPHA x86
Issue type        : kbprb
Solution Type     : kbworkaround

================================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: November 19, 1997
© 1998 Microsoft Corporation. All rights reserved. Terms of Use.