ADCS RPC issue

Question

Hello,

I have freshly installed an ADCS server, root enterprise, standalone integrated to a domain.

All seems OK, all port is open (same VLAN with domain controler without firewall)

I can request certificate from another server without any problem, but only the domain controler can't request beceause RPC error ...

I have tried, a lot of solution found on internet :

RPC service is started

Communcation port is open

Some registry key that contain certsrv is present

Acces right on DCOM, user group ... is ok (by default)

I don't understand why only the domain controler have this issue ...

Need help please :s

"Sorry for my English"

Answer 1

Thx for reply.

Yes all port is open, both server are on the same subnet and the windows firewall is disabled.

Port tested with Portqry and telnet

The request is working with another server (not a DC) in the same subnet like DC

Only the DC this issue
I have try all solution from the link :s

Answer 2

Hello

Thank you for your question and reaching out.

The ports 445 and 139 are used by the CA to try to reach the requesting DC; therefore, please double-check that these ports are open in your firewall (or turn it off completely for checking purposes).

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/error-0x800706ba-certificate-enrollment

--If the reply is helpful, please Upvote and Accept as answer--