Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
IPSEC template not showing in web enrollment

Answered IPSEC template not showing in web enrollment

  • Wednesday, December 12, 2012 6:01 PM
     
     
    Sign In to Vote
    0

    Good Day

    I have a W2K3 R2 server standard edition.. with an Enterprise CA and is an AD domain controller.

    I have added the IPSEC to the template to be issued in the CA and have put the permissions to full contoll for the administrator and domain admins.

    Restarted the certificate services and IIS, and still IPSEC isn't showing in the drop down for certificate templates in the web enrollment.

    I'm also using the IE 6.0 on the server for web admin.

    My enviroment is closed in a lab and has now access to internet.

    What am I doing wrong?

    Regards

    Dana Burton

     

All Replies

  • Thursday, December 13, 2012 3:44 PM
     
     
    Sign In to Vote
    0

    There are two IPSec templates, the one named "Offline Request" can be used together with the web enrollment because it supports supplying the subject name inte the request. The other IPSec template is configured to use Active Directory to supply the subject name and the template i targeting computer or machine accounts making it impossible to use in the web enrollment to enroll a "user" certificate.

    /Hasain


     
  • Tuesday, December 18, 2012 6:39 PM
     
     Answered
    Sign In to Vote
    0

    Hi Hasain

    Thanks for the reply.

    I figured out a way the the IPSEC Intermediate Offline template to be used for my purposes, all I needed was to have the IPSEC Security Tunnell Endpoint OID 1.3.6.1.5.5.7.3.6 to be in the template.

    What I did was I used ADSIEdit.msc to edit the IPSEC Intermediate Offline template and added the IPSEC Security Tunnel Endpoint OID.

    Then in the Web Enrollment I used the IPSEC Intermediate Offline template and the device certificate authenticates properly.

    Regards

    Dana


    • Marked As Answer by dpbpc62 Tuesday, December 18, 2012 6:44 PM
    • Edited by dpbpc62 Tuesday, December 18, 2012 8:45 PM
    •  
     
  • Tuesday, December 18, 2012 11:52 PM
     
     
    Sign In to Vote
    1

    Although this worked out for you, I would be careful using this method as it is not supported to "edit" the v1 templates except for security ACL's.

    /Hasain