Re: Problem with certificate templates

Hi,

By duplicating the template you are creating a version 2 certificate
template. Version 2 certificate templates can be created on any CA but can
only be published on a Windows 2003 Enterprise Edition CA or greater. If
you notice from your screenshot in the the "Minimum Supported CAs" column
it says, "Windows Server 2003, Enterprise Edition".

Hope this helps,

Brian Delaney
Microsoft Canada
--

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
Thread-Topic: Problem with certificate templates
thread-index: AccSYbL3LWO8dy66SkCjjFuQKSlkjw==
X-WBNR-Posting-Host: 80.203.207.194
From: =?Utf-8?B?amVyaW5n?= <jering@xxxxxxxxxxxxxxxxxxxxxxxxx>
References: <EBCB81C8-1724-414C-BB31-0CEDBBD045BA@xxxxxxxxxxxxx>
<OQHeUAmEHHA.4620@xxxxxxxxxxxxxxxxxxxx>
Subject: Re: Problem with certificate templates
Date: Mon, 27 Nov 2006 12:22:02 -0800

Hi!

The webserver with the screenshots just had a systemdisk-failure. I`ve
uploaded them in a new location:
http://193.213.24.12/umoe/cert_01.jpg
http://193.213.24.12/umoe/cert_02.jpg

I`ve not been able to solve the problem yet...

--Jan Egil--

"Miha Pihler [MVP]" wrote:

Hi,

were you able to solve this problem? I tried but I can't access the
website
where you posted screen shots.

--
Mike
Microsoft MVP - Windows Security

"jering" <jering@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:EBCB81C8-1724-414C-BB31-0CEDBBD045BA@xxxxxxxxxxxxxxxx
OS: Windows Server 2003 Std R2 w/SP1
Domain: Windows 2003 native

I have an Enterprise CA and try to create a template.

If you see at the attachments, I have created the template by copying
the
Computer-template, named it LCS2005EE and set "Allow private key to be
exported" and "Supply in the request". When I try to "Create a new
certificate template to issue", the template I`ve created is not in
the
list.
I can`t figure out why, and was wondering if you got any suggestions
for
me
to try out.

I`ve tried this in 2 different lab-domains, so I guess there is
something
I`m doing wrong...


I got 2 screenshots to demonstrate the issue here:
http://www.jan-egil.net/images/cert_01.JPG
http://www.jan-egil.net/images/cert_02.JPG






.

Relevant Pages

  • Certificate Template Minimum Supported CAs
    ... Can new Certificate Templates be Windows 2003 Minimum Supported CA's? ... how do you set a template to be Windows 2003 Minimum Supported CA's? ... enable security template list? ...
    (microsoft.public.windows.server.security)
  • Re: Error enrolling machine certs
    ... computers you have to create one by copying a V1 template and then naming ... shown under "certificate templates" in the CA Management Console for the CA ... computer as a local admin to request a computer certificate either through ... >> Group Policy which also will work for Windows 2000 computers. ...
    (microsoft.public.windows.server.security)
  • Re: Certificate Templates
    ... To create a new template choose the template that best matches what you ... want, in you case it sounds like the User template is the best match, then ... A good pointer for certificate templates is the TechNet site, ... How do> create a new template and add to that template object identifier? ...
    (microsoft.public.windows.server.security)
  • Re: Custom smartcard logon template not available in web enrollment pages
    ... V2 certificate templates are only available on the Enterprise Edition or Datacenter Edition skews ... Does the requesting user (the enrollment agent) have Read and Enroll permissions ont he custom template. ...
    (microsoft.public.windows.server.security)
  • Re: Missiong "wireless authentication" certificate template
    ... Actually the template you want to use is the "Workstation Authentication" ... You can view this template by opening the Certificate Templates mmc. ...
    (microsoft.public.internet.radius)