Re: Certificate Services Error

rsys пишет:
hi,

in my exchange 2003 enterprise server's event application log, I see the
following messages

Certificate Services denied request 24873 because The requested certificate
template is not supported by this CA. 0x80094800 (-2146875392). The request
was for MYDOMAIN\DC2$. Additional information: Denied by Policy Module
0x80094800, The request was for a certificate template that is not supported
by the Certificate Services policy: DomainController.
The request was for a certificate template that is not supported by the
Certificate Services policy

MYDOMAIN is the name of the domain, it is a windows 2000 AD.DC2 is one of
the domain controllers. Exchange 2003 is installed on a windows 20003 ent
server, which is a member server in the domain. The same error appears for
requests from my other domain controllers too.

Everything is working properly. So what causes these errors and what should
I do about it?

Thanks a lot, folks.
1. Are you sure that your CA is still working? Maybe some CRL expired
and service stopped.

2. Make sure, that template from error is published in AD (should be
there by default), this can be done with CA MMC snap in, and that
servers trying to request a certificate has an enroll right on that
template (this can be done through certificate templates snap in).




--
With best regards
Nickolay Domukhovsky, MCSA

.

Relevant Pages

  • Re: How to renew a certificate programmicaly
    ... Name 2 extension must contain a UPN entry, ... Please notice that the application> policy restriction is "Enrollment Agent" and that the "old certificate" does> not have this application policy. ... > I cannot see this template in the MMC snapin, I guess it is because it has> "X number of authotized signatures" and "Subject details supply in request". ...
    (microsoft.public.platformsdk.security)
  • Re: Problems requesting computer certificates on an issuing CA
    ... The exact permissions on my template are: ... I tried to manually enroll for a computer certificate based on ... CA allows the computers to request certificates. ...
    (microsoft.public.windows.server.security)
  • Re: Certificates for l2tp VPN
    ... "IPSec offline request" template, the certificate is in the Local ... canīt install the correct certificate to make it work. ...
    (microsoft.public.win2000.security)
  • Re: Computer and User Certificates Issues
    ... You created a custom V2 template but is this CA running Windows Server ... > Can you request any certificate at all via the mmc snapin for either user ... > users have the allow permission for request certificates. ... I have also tried manually enrolling for a computer certificate ...
    (microsoft.public.security)
  • Re: Certification Authority cannot use certificate template
    ... certificate request wizard in IIS Manager. ... Also, at the CA, ensure that the Web server certificate template is ...
    (microsoft.public.security)
Loading