JSI Tip 7601. When a user requests a certificate from a Windows Server 2003 CA, they are prompted to download an ActiveX control?

When the user tries to install the ActiveX control, it is likely to fail as they do NOT have administrative authority.

This behavior will occur if the server has a newer version of Xenroll.dll than the version on the user's computer.

To prevent this behavior:

1. Use NotePad to open the %SystemRoot%\System32\Certsrv\Certdat.inc file on the server.

2. Change the line that contains sXEnrollVersion="5,131,3686,0" to be sXEnrollVersion="5,131,3659,0".

3. Save the file and exit NotePad.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.