When users request certificates from a Windows Server 2003-based Certificate Authority (CA), why does the CA prompt them to download an ActiveX control?

A. Windows 2003 includes a new version of xenroll.dll (an ActiveX control that can create certificates) that prompts users of previous Windows versions to download an ActiveX control when requesting a certificate. To resolve this problem, go to the Windows 2003 certificate server and perform the following steps:

1. Log on as an Administrator.
2. Open \%systemroot%\system32\certsrv\certdat.inc in a text editor.
3. Locate the sXEnrollVersion="5,131,3686,0" entry, then modify the entry to

   sXEnrollVersion="5,131,3659,0" 

4. Save the changes, then close the text editor.

End of Article