Windows 10: SCEP Certificate enrollment failed

Hi,


My laptop has started to crash with a buzzing sound which comes from the speakers. It does not matter if I am gaming or watching a movie, this behavior is random. Here are the error details:


SCEP Certificate enrollment for WORKGROUP\DESKTOP-7VNO1BL$ via https://INTC-KeyId-17a00575d05e58e3881210bb98b1045bb4c30639.microsoftaik.azure.net/templates/Aik/scep failed:



SubmitDone

Submit(Request): Bad Request

{"Message":"Attestation statement cannot be verified, rejecting request: 0x80070057."}

HTTP/1.1 400 Bad Request

Cache-Control: no-cache

Date: Tue, 01 Oct 2019 15:32:27 GMT

Pragma: no-cache

Content-Length: 86

Content-Type: application/json; charset=utf-8

Expires: -1

x-ms-request-id: 03feca3b-a6b9-4f6f-b726-dbbf09a2a5a9

Strict-Transport-Security: max-age=31536000;includeSubDomains

X-Content-Type-Options: nosniff



Method: POST(3188ms)

Stage: SubmitDone

Bad request (400). 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)


Can anyone please help with a solution? Also, my wifi driver randomly fails, and I have to uninstall it from Device Manager to get it back to running again. Not sure if this is related.

:)

 

SCEP Certificate enrollment initialization Failed Event ID 86 Errors


Hello all. I'm getting the messages below at every boot. I usually get two or three each time all similar with the exception of the IDs changing. I've scoured the net but found nothing on this. Just curious if anyone else has seen these and if so how to get it resolved. They've been happening since day one of my Windows 10 Pro install. I've attempted a reinstall but get the same messages. I'm only getting this on my Dell Latitude E7270 unit. My Dell Inspiron 7559 does not throw these messages. Something to note is that this is a standalone laptop so not connected to a domain etc. Thanks for any info if anyone has any!

SCEP Certificate enrollment initialization for XXXX\XXXXXX$ via https://NTC-NameId-bcd3c503d39e51b0c...lates/Aik/scep failed:


GetCACaps
GetCACaps: Not Found
{"Message":"The authority "ntc-nameid-bcd3c503d39e51b0c50489e9228e984a7e63e303.microsoftaik.azure.net" does not exist."}
Cache-Control: no-cache
Date: Tue, 11 Oct 2016 15:24:21 GMT
Pragma: no-cache
Content-Length: 122
Content-Type: application/json; charset=utf-8
Expires: -1
Server: Microsoft-IIS/8.5
x-ms-request-id: 3edaba7e-acd4-4bdc-acfc-274093e54f6f
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-Content-Type-Options: nosniff
X-Powered-By: ASP.NET


Method: GET(422ms)
Stage: GetCACaps
Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

 

Problem with Enrollment of Certificates in WMDC. ActiveSync is OK.

Hello all,

next problem bellow. Because of company politics we received new Notebooks with Windows7 and WMDC instead of old Windows Xp and ActiveSync. For correct mail synchronisation between my WindowsMobile HTC and corporate Exchange Server I need to enroll a company's
certificate. I putted needed certificate to my HTC and set up this certificate in my mobile device.

Next step I need to do - Enroll this certificate with my WMDC.

And this is a problem: i can not find my company's certificate on my mobile device. WMDC can not let me choose certificate and i see just only a blank screen. Like here:http://i.technet.microsoft.com/Ff459604.f9434d30-b93d-41b1-b0e8-91605a5f2cee(en-us,TechNet.10).jpg .

In ActiveSync it was some dropped down menu in the Enrollment proccess with ability to choose "Certificate type from Active Directory" and our companies certificate appeared in the list with some others certificates. But it was real. And I could find it. Example
here:
http://i.technet.microsoft.com/Ff459604.749bcb4d-d4c9-430d-9db5-c58f768fde5d(en-us,TechNet.10).jpg .

Question is: Where in WMDC I can choose such dropped down menu like it was in ActiveSync?

OR maybe it is another way of solving of my problem present somehow

Without this step I cannot Enroll certificate and cannot connect to our Exchange Server because of Sertificate is needed.

Please help. Will appreciate for your reply or advices.

 

SCEP Server(sub-CA) issues only once CA certificate instead of certificate chain

Hi ,

I configured a CA server in windows server 2008 with rootCA(windows server 2008)-->SubCA1(windows server 2008)--->SubCA2 (windows server 2008)

and configured NDES in SubCA2 and when I send a SCEP request to subCA2 .

It issues me a certificate and CA certificate(public key) and CA certificate only has subCA2 certificate but does not present a certificate chain .

But when I go to issued certificates in SubCA2 it shows the entire certification path till rootCA. Is there a way to send entire certificate chain to SCEP client or is this expected behavior