Windows Server

Problem: Security Server Software says invalid key length when trying to import/validate certificates

Solution: When using win 2003 server, the default key length for a certificate is the incorrect value. This must be changed to 1024 instead of the default 512. Win2000 Server does not have this issue. Keys must be a length of 1024

Problem: We have encountered an error report: error type EVT_EAPTLS_ERROR… Authentication Failed and or Authentication Failed: CRL has expired.

Solution: CRL has expired and new CRL need to be generated or the system time is incorrect. Check system time first before creating new CRL.

Problem: Unable to Retrieve a CRL list. MS displays this message:

Solution: Ensure the system time is correct, otherwise the certificates and CRLs with incur expiration and invalid issues during retrieve and install. If this does not work, recreate the CA.

Problem: When working rolling back the software from Win2003 to Win2000 server, how do I use the same certificates?

Solution: There is an option to export the CA in Win2003 and then restore the CA in Win2000 server. Otherwise a complete rebuild of the OS is needed along with recreating all of the certificates.