"No certificate templates could be found..." error using web enrollment on Win2k8 R2 Enterprise SubCA

-

hi folks,

i have installed online issuing ca running on win2k8 r2 enterprise, , installed web enrollment role service on it.

i have duplicated two computer certificate templates (computer & web server) on our dc's, modified them as win2k3 templates, made changes , saved them, published them on ca selecting new -> certificate tempate issue. templates have read , enroll permissions set domain admins and domain computers (my account domain admin). can enroll them using certificates mmc.

when connecting https://myca.mydomain.com/certsrv however, page loads. click on 'request certificate', 'create , submit request ca'. see warning indicating website attempting perform digital certificate operation on behalf, click yes. after doing so, error:

"no certificate templates found. not have permission request certificate ca, or error occurred while accessing active directory."

i have spent 2 hours searching on error , found @ least 50 people complaining of this, no real solutions. here have tried no success:

1) http://support.microsoft.com/kb/811418. references solution, hasn't worked anyone. string values , cases same me.

2) enabled ssl on certsrv website.

3) set authentication on certsrv site enable integrated authentication , disabled anonymous authentication.

4) created separate application pool running under network service set certsrv application run under it.

i should note exact same condition occurred in lab install, rather waste time trying fix in lab, went ahead production install, experience same problem, apparently web enrollment is broken out of box on 2k8 r2 enterprise.

does have idea how working advertised? help,

ian

ok, have found reason this.

when configure certificate templates, on subject name tab of template have choice how supply subject name in certificate request.

if select 'build active directory information' , choose parameter supplied list, not able use web enrollment , continue generate 'no certificate template found...' error.

if select 'supply in request', have access these (and these) templates after connecting web enrollment service.

simple stupid. fellows,

ian



Windows Server  >  Security



Comments

Post a Comment

Popular posts from this blog

CRL Revocation always failed

-
hi all, i try configure radius server nps, somehow certificate authentication client failed with reason: reason = revocation function unable check revocation because revocation server offline. then check certificate client, certutil -f -urlfetch -verify client7.cer, result follow: issuer:     cn=entca     dc=intra     dc=domain     dc=co     dc=sg subject:     cn=computer.intra.domain.co.sg cert serial number: 1c5b00de000000000041 dwflags = ca_verify_flags_allow_untrusted_root (0x1) dwflags = ca_verify_flags_ignore_offline (0x2) dwflags = ca_verify_flags_full_chain_revocation (0x8) dwflags = ca_verify_flags_console_trace (0x20000000) dwflags = ca_verify_flags_dump_chain (0x40000000) chainflags = cert_chain_revocation_check_chain (0x20000000) hcce_local_machine cert_chain_policy_base -------- cert_chain_context -------- chaincontext.dwinfostatus = ce...
Read more

Failed to query the results of bpa xpath

-
Image
i have new server installed hyper v, iis , domain services roles on it.  i checking event log , see warning multiple times, idea how rid of it?? failed query results of bpa xpath: microsoft/windows/fileservices:$reports$\*\result.xml:/resultdatabase/result. error: device attached system not functioning., last error: system cannot find path specified.. follow me on twitter <<< levalencia blog <<< hi, similar issue discussed in forum: to rid of warnings: 1. go dashboard 2. click on add roles , features 3. click next "before begin step" 4. select "role based or feature based installation" , click next 5. select given server server pool , click next 6. in server roles step make sure following checked:   file , storage services > file , iscsi services > file server, click next 7.click next through rest of steps , install server role 8. rerun bpa scan described earlier for more information please refer foll...
Read more

0x300000d errors in Microsoft Remote Desktop client

-
we use rd connect home users office. @ server side remote desktop gateway configured on 2008r2 server. experience following:   for years worked fine, starting last year users apple macbook experienced connection errors after new version of microsoft remote desktop in app store , automatic update. after couple of weeks error disappaered when new updates released. since 6 8 weeks problem again. because don’t have macbook cannot reproduce problem.   starting couple of weeks samsung s6 experiencing problems, here version 8.1.37.135 installed, error displayed is: can’t connect tot remote pc because remote desktop gateway server temporaraily unavailable. try connecting later or contact network administrator assistance. error code  0x300000d   because has worked fine years expect issues on client can configuration error on gateway server.   who pin point real cause?   however, testing other rd gateway server works ok settings identically....
Read more