Autoenrollment issue

[Magzy]

Hi,

I have an SBS 2003 server, fully patched. I'm about to migrate it over to SBS 2011. In the logs, I have found a number of errors about autoenrollment of the DC certificate. That certificate appears to have recently expired and not been able to autorenew. The error in the log is:

Error 13:

Automatic certificate enrollment for local system failed to enrol for one Domain Controller certificate (0x800b0113). The certificate has invalid policy.

I also have the warning, linked to this error of:

Certificate Services denied request 269 because The certificate has invalid policy. 0x800b0113 (-2146762477). The request was for CN=UKGNMSBS01.opti-cal.local. Additional information: Error Constructing or Publishing Certificate Invalid Application Policies: 1.3.6.1.5.5.7.3.2

I have found very little on this exact error message. My question is, does anyone have a fix for this or can I ignore this error and perform the migration anyway (AFAIK the new 2011 SBS creates its own CA and assigns certificates against itself).

Thanks,

Magz.