This message was deleted.
# citrix-netscaler
s
This message was deleted.
j
Why would an ADC interact with FAS?
ADC isn’t in the FAS flow - StoreFront plays in that space
d
I know, but this is the only difference to the other environments. I have just built a 12.1 parallel and it does not create the requests 🤮😵
c
Did you disable auto-enroll on the certificate template on the CA?
j
Hrmmmm that is narky as - wonder if @Oz Zy has any ideas
d
Yea auto enrollment is enabled. I try to disable this. Thx
c
This is why you are receiving the unsolicited certificate requests.
d
But only with the adc 13.0. with 12.1 I don’t get this annoying requests 😅
c
This isn't related to ADC, this is related to Active Directory and your Certificate Authority. I'm trying to find the documentation where this is communicated -- https://support.citrix.com/article/CTX237503
Problem Cause Older versions of FAS deploy templates with the Autoenroll permission for domain computers. This causes domain computers to attempt to enroll automatically for these templates in environments where auto-enrollment is enabled by GPO.
j
The ADC component makes no sense at all - where are the requests coming from?
d
Thx. But I still don’t understand why I don’t get the problems with the 12.1 adc in the same environment. I can’t get these two strings together. So I didn’t get the whole thing in my head.
c
Are you using the same FAS servers?
d
Never mind that was the solution. Now I don’t get the requests anymore with the adc 13.0
c
Did you re-import the certificate templates under a different name? Maybe when originally deployed they were added with a custom naming convention? When you do this you have to modify your FAS config to point to the correct certificate templates.
d
Yea Chris. Same ca and fas
c
This isn't related to ADC, I can't tell you why you didn't have the issue before, because it should have been an issue since the certificate templates were imported, so long as that Auto-Enroll for domain computers was enabled.
👍 3
d
Thx Chris. It’s solved. 😇👍