I feeel a bit like an idiot as I have done this so many times and cannot seem to get this done this time. I have been attempting to set up a test lab at work that best duplicates what the real set up is going to be. I cannot seem to manage creating the web server certificate to install on the ISA server where we will be using Kerberos constrained delegation.
When I try to issue it via the enrollment web site ISA says the cert is invalid as it gets put into the user store, and not the computer's. When I export and import the cert, it still says it is invalid. I want to try to request the cert via an MMC but no matter what I do I only get the option to request a Computer certificate.
The forest/domain are at server 2003 but the CA is installed on server 2008 and the ISA 2006 server is on win server 2003.
Any advice?
