CA certreq -submit

Servus,
habe hier eine Offline CA und eine sub-ordinated Enterprise CA im AD.
Enterprice CA läuft auf einem DC _ohne_ IIS.

Funktioniert alles soweit: Root Zertifikat und Enterprise Zertifikat
sind ausgestellt und ausgerollt, ein Zertifikat für einen Webserver (vom
Webserver angefordert) ebenso.

Der Request für einen st***normalen Memberserver mittels certreq +
inf-Datei scheitert mit der Meldung (Error 53) :
Certificate Services denied request 16 because The requested certificate
template is not supported by this CA. 0x80094800 (-2146875392). The
request was for CN=Server.local.intra. Additional information: Denied by
Policy Module 0x80094800, The request was for a certificate template
that is not supported by the Certificate Services policy: Computer


Auf dem Template "Computer" sind die richtigen Rechte gesetzt.
Ich bin Enterprise Admin ... und an dem Punkt ratlos :-(

Hat jemand einen Tip / Link?

Grüße und Danke,
Christian G.


.

Relevant Pages

  • Re: Certificates on Floppy Disk?
    ... Can it have something to do with the fact that the copy of the certificate ... Windows Server 2003, ENTERPRISE Edition,' ... If yes, is there a solution for this, as I don't have the Enterprise ... >> Save the template and add it to list of available templates. ...
    (microsoft.public.windows.server.security)
  • Re: Help! Certificate Templates
    ... > I have attempted to create a new smart card template. ... > new template shows up in the Certificate Template MMC, ... > I was logged on to the CA as an Enterprise Admin. ... > This is a completely clean Windows 2003 install, ...
    (microsoft.public.windows.server.security)
  • Re: Certificate Templates
    ... In certificate template msc, the only option I see is view object ... I know which object Identifier I want to choose. ... If you are running an Enterprise CA and you ...
    (microsoft.public.windows.server.security)
  • Re: Help! Certificate Templates
    ... are you running standard edition of windows server 2003? ... The> new template shows up in the Certificate Template MMC,> however, when I attempt to use it as a new certificate to> issue I am unable to add it to the CA.> ... > I was logged on to the CA as an Enterprise Admin. ...
    (microsoft.public.security)
  • Re: Creating new projects based on the enterprise global
    ... The only way you can do this is to set the default view in the template, ... Dale suggested, but even this doesn't set the default view because only the ... train your users to select the Enterprise views you want them to ... >> "We wrote the book on Project Server" ...
    (microsoft.public.project.pro_and_server)