What file extensions need to be allowed for Certificate Web Enrollment Service?

Question

Good morning. I have a subordinate CA that is running Certificate Enrollment Web Services. I am trying to secure the service. I have unchecked the "Allow unlisted file extensions" in request filtering of IIS 10 for the site. When I do this, I get an error 404 when trying to access my sight. I have tried to add in the required file extensions, but I appear to be missing something. Can someone help me with the file extensions that need to be allowed for the Certificate Enrollment Web Service to work? Thank you in advance!

Answer 1

Hi,

Thank you for posting your query.

Kindly follow the steps provided below to resolve your issue.

Applies To: Windows Server 2012 R2, Windows Server 2012

The Certification Authority (CA) Web Enrollment role service provides a set of web pages that allow interaction with the Certification Authority role service. These web pages are located at https://<servername>/certsrv, where <servername> is the name of the server that hosts the hosts the CA Web Enrollment pages. The certsrv portion of the URL should always be in lowercase letters; otherwise, users may have trouble checking and retrieving pending certificates.

Go to this link for your reference https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831649(v=ws.11)

------------------------------------------------------------------------------------------------------------------------------------

If the answer is helpful kindly click "Accept as Answer" and upvote it. Thanks.