Ask a Question

Solution ID : SO11000

Unable to enroll for a Code Signing Certificate for Microsoft Authenticode through Managed PKI for SSL Certificate Enrollment pages on a Windows Vista or Windows 7 Operating System


When enrolling for a Code Signing Certificate for Microsoft Authenticode through the Managed PKI for SSL Certificate Enrollment pages on a Windows Vista or Windows 7 Operating System, you receive one of the following error: 

Error: ActiveX Control Required
Error: Cryptographic Service Provider drop down menu is blank


Code Signing Certificate for Microsoft Authenticode enrollment requires the use of an ActiveX Control.  This error occurs if the Microsoft Active Directory Service add-on is not run.


To resolve this issue, please perform the following steps:

Step 1: Add the enrollment page as a trusted site

  1. Open Internet Explorer
  2. Go to Tools > Internet Options.
  3. Click on the Security Tab.
  4. Click on Trusted Sites.
  5. Click the Sites button.
  6. In the Add this website to the zone section, enter https://* and click Add.
  7. Click Close.
  8. Under Security level for this zone, click Custom Level.
  9. Under ActiveX controls and plug-ins, please set the following settings:
    • Allow previously unused ActiveX controls to run without prompt = Disable
    • Allow Scriptlets = Prompt
    • Automatic Prompting for ActiveX controls = Enable
    • Binary and script behaviors = Enable
    • Download signed ActiveX controls = Enable
    • Initialize and script ActiveX controls not marked as safe for scripting = Prompt
    • Run ActiveX controls and plug-ins = Enable
    • Script ActiveX controls marked safe for scripting* = Prompt
  10. Click OK > OK (If asked "Are you sure you want to change the security settings for this zone?" select Yes)


NOTE: Some users may not have the appropriate rights to modify the IE Security settings.  If you are unable to make these modifications, please notify your internal help desk or IT Support.

Step 2: After the Security changes are complete, close the IE Browser and repeat the Enrollment process.

If you continue to have issues with the Enrollment, please refer to the following solution to reset your Internet Explorer settings: INFO1753

Once you have reset your Internet Explorer Settings repeat Step 1 and Step 2.