CSP Fields Display as "Loading" When Creating an Advanced Certificate Request

Issue

When using the Active Directory Certificate Services (AD CS) web enrollment website to create an Advanced Certificate Request, the Cryptographic Service Provider (CSP) fields remain displayed as "Loading" and never populate.

Cause

The AD CS web enrollment pages rely on ActiveX controls to access certificate enrollment functionality. If the website is not trusted by Internet Explorer, the required ActiveX components may not load correctly, causing the CSP fields to remain in the loading state.

Resolution

1. Open Internet Options.
2. Select the Security tab.
3. Select Trusted sites.
4. Click Sites.
5. Add the AD CS web enrollment site URL to the trusted sites list.
6. Close and reopen Internet Explorer.
7. Navigate back to the certificate enrollment page and create the request again.

After the site has been added to the Trusted sites zone, the CSP fields should populate correctly.

Additional Information

Trusted sites can be deployed centrally using Group Policy. Refer to the following article for guidance: Securing Zone Levels in Internet Explorer

The AD CS web enrollment pages require ActiveX support. As a result, the advanced certificate request functionality is not available in modern browsers such as Google Chrome, Microsoft Edge, or Mozilla Firefox. Internet Explorer must be used for this feature.

Date Created: Friday, 19 June 2020, 10:48 PM