Ask a question

Search Forums:

• Search Security Forum
• Search All Windows Server Forums
• Search All Microsoft TechNet Forums

 

Can't request cert on client from a WIndows 2008 CA.

• Friday, November 06, 2009 4:10 PMJohan Christensson

   
  

  0

  Sign In to Vote
  Hi everyone.
  
  I have set up a CA on one of our Windows 2008 Standard DC computers, and as far as I can see, everything seems to be functional as expected. How ever, when on a client computer, if you run the MMC with the "Certificates" snap-in and in the "Personal" store tro to "Request new certificate..." you will first get the message "You cannot request a certificate at this time because no certificate types are available. If you need a certificate, please contact your administrator."
  
  If you on the same screen in the wizard place a checkmark in the "Show all templates" box, you will get a list of all the certificates. And I guess that the publishing of templates to the AD works since there is a duplicated template that I made just to check that is named "Copy of User". But all the templates are greyed out and cannot be selected. If you look at the "User" template, it will say:
  "The requested certificate template is not supported by this CA. A valid CA configured to issue certificates based on this template cannot be located, or the CA is not trusted."
  
  Is this a limitation since I'm running the CA on a Standard Edition server, or is there something missing in the configuration? The CA's certificate is valid, and if I create a website on our internal webserver and add a certificate issued from the internal CA it is trusted by the clients so as I said before, this and if I check all the eventlogs and such the CA seems to work.....sort of.
  
  All pointers ar very much appriciated!
  
  Best reagrds,
  Johan Christensson
  
  • Reply
  • Quote