RE: Certificate Services

Hi,

Which edition of Windows is installed on the CA?
If you are using the duplicate template function, it creates a version 2
certificate template which can only be published on a Windows Server 2003
Enterprise Edition CA or greater. Standard edition will not allow you to
publish this template. If you are using Standard and unable to upgrade to
enterprise you will need to utilize one of the existing v1 templates which
fits your needs.

Also, on the template you wish to enroll on ensure that the user has the
correct permissions, Read and Enroll.

http://www.microsoft.com/windowsserver2003/technologies/pki/default.mspx is
a good starting place for documentation on PKI. There are links to most of
the common whitepapers and KBs here.

Hope this helps,

Brian Delaney
Microsoft Canada
--

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
Thread-Topic: Certificate Services
thread-index: Acccmj76TIXE9xYYQAGGpN0iSsG67Q==
X-WBNR-Posting-Host: 88.88.126.110
From: =?Utf-8?B?amVyaW5n?= <jering@xxxxxxxxxxxxxxxxxxxxxxxxx>
Subject: Certificate Services
Date: Sun, 10 Dec 2006 12:32:01 -0800

Hello!

I have a Windows Server 2003 lab-domain.
I`m struggling with the certificate services. For example, I have a LCS
2005
deployment, and was trying to publish a template for LCS. I`m able to
create
the template, but not to make it available for clients. When connecting to
http://servername/certsrv the only templates showing up are User and EFS.

Now I`m trying to get WPA2 Enterprise with RADIUS to work, but also now
the
certificates is the problem. I`m trying to do a simple task like assigning
a
client-computer with Windows XP a regular computer-certificate. But no...I
can`t understand why User and EFS is the only available templates.

Does anyone have some good links regarding the certificate services?


.

Relevant Pages

  • RE: Certsrv and Autoenrollment problem
    ... Thank you for posting to the SBS Newsgroup. ... so it will not be instantiated on the template ... Certificate Authority snap-in will show the templates in the Certificate ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Problems requesting computer certificates on an issuing CA
    ... The exact permissions on my template are: ... I tried to manually enroll for a computer certificate based on ... CA allows the computers to request certificates. ...
    (microsoft.public.windows.server.security)
  • Re: Certificate Services Error
    ... Certificate Services denied request 24873 because The requested certificate ... template is not supported by this CA. 0x80094800. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Error enrolling machine certs
    ... failing to enroll using Domain Controller template. ... certificate templates and to the certificate services - everything that can ... > computer as a local admin to request a computer certificate either through ...
    (microsoft.public.windows.server.security)
  • Re: Win2003 server: certificate templates
    ... The best way will be to enroll from the web page. ... request a machine certificate from a user account. ... > I created a "serverCert" template by modifying the "computer" template, ... > but I cannot access "serverCert" through the mmc panel. ...
    (microsoft.public.win2000.security)