Click here to get back home

Cannot Add Certificate Templates To Enterprise CA

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Cannot Add Certificate Templates To Enterprise CA John 12-14-2006
Posted by John on December 14, 2006, 7:45 pm
Please log in for more thread options
I am in the process of implementing key archival on my CA, but I am not
able to add the "key recovery agent" certificate template to my CA. I am
only able to add a small handful of templates. My CA has already issued a
few certificates could this be the problem?

-John



Posted by Paul Adare on December 14, 2006, 7:52 pm
Please log in for more thread options
microsoft.public.windows.server.security news group, <"John"
<johnAtUnwantedmailDotCom>> says...

> I am in the process of implementing key archival on my CA, but I am not
> able to add the "key recovery agent" certificate template to my CA. I am
> only able to add a small handful of templates. My CA has already issued a
> few certificates could this be the problem?

Sounds like you're running your CA on Windows Server 2003
Standard Edition. Key archival and version 2 certificate
templates are only available when the CA is running on
Enterprise or Datacenter.

--
Paul Adare - MVP Virtual Machines
Waiting for a bus is about as thrilling as fishing,
with the similar tantalisation that something,
sometime, somehow, will turn up. George Courtauld


Posted by John on December 15, 2006, 2:51 pm
Please log in for more thread options
Would have been nice if that was included in the whitepaper. How about EFS
recovery, is that permitted, and if so any papers on how to set that up?

Thanks I was about to flatten the CA.

-John

> microsoft.public.windows.server.security news group, <"John"
> <johnAtUnwantedmailDotCom>> says...
>
>> I am in the process of implementing key archival on my CA, but I am not
>> able to add the "key recovery agent" certificate template to my CA. I am
>> only able to add a small handful of templates. My CA has already issued
>> a
>> few certificates could this be the problem?
>
> Sounds like you're running your CA on Windows Server 2003
> Standard Edition. Key archival and version 2 certificate
> templates are only available when the CA is running on
> Enterprise or Datacenter.
>
> --
> Paul Adare - MVP Virtual Machines
> Waiting for a bus is about as thrilling as fishing,
> with the similar tantalisation that something,
> sometime, somehow, will turn up. George Courtauld
>



Posted by Paul Adare on December 15, 2006, 3:49 pm
Please log in for more thread options
microsoft.public.windows.server.security news group, <"John"
<johnAtUnwantedmailDotCom>> says...

> Would have been nice if that was included in the whitepaper.

What white paper are you referring to? The requirement for
Enterprise or Datacenter for key archival is well documented.

> How about EFS
> recovery, is that permitted, and if so any papers on how to set that up?

Are you asking about key recovery or data recovery?


--
Paul Adare - MVP Virtual Machines
Waiting for a bus is about as thrilling as fishing,
with the similar tantalisation that something,
sometime, somehow, will turn up. George Courtauld


Similar ThreadsPosted
Issuing Version 2 templates with Web Enrollment pages (Windows Server 2003 Enterprise) October 14, 2005, 11:58 am
"No Certificate Templates Could Be Found" Error Message When User Requests Certificate from CA Web Enrollment Pages September 21, 2006, 1:31 pm
Certificate templates with standalone CA October 7, 2005, 4:07 pm
Certificate Templates and third party CSP January 5, 2006, 8:11 am
SCEP and certificate templates June 11, 2006, 9:07 am
Duplicate Certificate templates January 28, 2008, 9:18 am
Custom COMPUTER certificate templates July 21, 2005, 1:57 pm
Where to run the Certificate Services to be an Enterprise CA July 5, 2007, 2:24 pm
Where to run the Certificate Services to be an Enterprise CA July 5, 2007, 2:43 pm
Offline certificate creation fails on Windows 2003 enterprise CA without IIS March 27, 2006, 7:41 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap