|
Posted by rbaddanki on July 21, 2005, 1:57 pm
Please log in for more thread options
Hi,
I've created a certificate template based on default COMPUTER template
inside CA templates. When I try use that template in GPO autoenrollment
it is not showing up. why??
When I try to generate certificate on the CLIENT throug MMC, if I use
Win XP no problem. If I use Win 2K I can't see the computer template I
created, but I can see the default COMPUTER template. why??
This is really urgent. Any help is greatly appreciated.
Thanks,
Ramesh.
|
|
Posted by Paul Adare on July 21, 2005, 5:34 pm
Please log in for more thread options
the microsoft.public.windows.server.security news group,
> Hi,
> I've created a certificate template based on default COMPUTER template
> inside CA templates. When I try use that template in GPO autoenrollment
> it is not showing up. why??
You're talking about Automatic Certificate Request Services here, and
not autoenrollment. ACRS only supports computer certificates, and only
V1 templates. You're trying to add a V2 template which can't be done.
>
> When I try to generate certificate on the CLIENT throug MMC, if I use
> Win XP no problem. If I use Win 2K I can't see the computer template I
> created, but I can see the default COMPUTER template. why??
Again, V2 template. Windows 2000 clients won't see any V2 templates
through the MMC.
--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/ "The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea
|
|
Posted by rbaddanki on July 21, 2005, 2:42 pm
Please log in for more thread options Hi Paul,
Thanks a lot.
Then how to create V1 template on Windows 2003??
Thanks,
Ramesh
|
|
Posted by Paul Adare on July 21, 2005, 6:07 pm
Please log in for more thread options the microsoft.public.windows.server.security news group,
> Then how to create V1 template on Windows 2003??
>
You can't. You can only use the V1 templates that ship with the OS.
Perhpas is you explained your requirements in a bit more detail we could
be of more help. Why do you feel that you need a custom computer
template?
--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/ "The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea
|
|
Posted by rbaddanki on July 21, 2005, 4:48 pm
Please log in for more thread options Hi Paul,
We are trying to do machine authentication using certificates. I need a
template that can publish the certs in ActiveDirectory, later the
server module can get the public key from it and verify the signature
from client. Also I want subject name of the certificate to be FQDN,
this is required to query AD (to construct ldap url).
So if I use default COMPUTER template I can't do the above.
Thanks,
Ramesh.
|
| Similar Threads | Posted | | CA certificate template custom subject name format | January 9, 2007, 1:49 pm |
| CA certificate template custom subject name format | January 16, 2007, 12:11 am |
| Certificate Enrollment w Firefox and Custom Template | February 21, 2007, 8:03 pm |
| "No Certificate Templates Could Be Found" Error Message When User Requests Certificate from CA Web Enrollment Pages | September 21, 2006, 1:31 pm |
| Certificate templates with standalone CA | October 7, 2005, 4:07 pm |
| Certificate Templates and third party CSP | January 5, 2006, 8:11 am |
| SCEP and certificate templates | June 11, 2006, 9:07 am |
| Cannot Add Certificate Templates To Enterprise CA | December 14, 2006, 7:45 pm |
| Duplicate Certificate templates | January 28, 2008, 9:18 am |
| Cannot request computer certificate. | January 6, 2006, 1:00 pm |
|