This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I created a CA in openssl and all the infrastructure operations take place through the same. I created a .p12 file to import the CA in the newly installed Active Directory Certificate Services (AD CS), as a Standalone CA. Tried importing that PFX in both the cases but although in the initial steps when i typed the import password, it accepted the CA. But, when I proceeded to the final step of importing the CA, it gave an empty error box. Not error codes, just a blank box. Please help me in troubleshooting and fixing the issue.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 81%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
Would you mind take a screenshot and post it here?
Have you tried insert a different certificate to verify if problem persist?
Try remove the ADCS role and restart your Server and then add it again and see if the problem persist?
Sure... Here it is:
*btw i tried all those things. It is not accepting any certificates and private key unless you create a new one on the server itself, which is impossible to do in my case, as it will break the trust anchor.
what is the point in generating certs in OpenSSL and then importing to ADCS CA?
it would be better if you could post the dump of the certificate: certutil -dump cacert.pfx, enter PFX password when prompted and post the output here.
The CA I generated dates back a year. I just tried to make the issuance easier by now importing the CA in AD CS. I cannot afford to create a new CA in AD CS and need to import it only. If you have any solution regarding the same, I'd be grateful to you. :)
Attaching both the dump results for my subordinate CA below
<Removed for Privacy>
ok, now show please certutil -v -dump signingca.p12. The output will be more verbose.
This is a public forum and please do not share anything containing personal information for privacy reason.
From your screenshot, I believe this is a bug, try use a Windows 10 device and open the Feedback Hub app and under the category select Windows Server and there file a bug report and explain your issue and you may attach all log files, screenshots and other relevant issues so Windows Server team would be able to investigate. Make sure do not share private and personal information and just share necessary log files and hide personal information.
Thanks, I will do the same!
This doesn't really answer the question. Empty message box is least issue here, but actual issue is not solved.
The main issue was the empty message box which is something need to be investigated with the Windows Server team. The issue you discussed is different issue and in case you have any other problem, please create a new question.