Click here to get back home

Custom COMPUTER certificate templates

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Custom COMPUTER certificate templates rbaddanki 07-21-2005
Posted by rbaddanki on July 21, 2005, 1:57 pm
Please log in for more thread options
Hi,
I've created a certificate template based on default COMPUTER template
inside CA templates. When I try use that template in GPO autoenrollment
it is not showing up. why??

When I try to generate certificate on the CLIENT throug MMC, if I use
Win XP no problem. If I use Win 2K I can't see the computer template I
created, but I can see the default COMPUTER template. why??

This is really urgent. Any help is greatly appreciated.

Thanks,
Ramesh.



Posted by Paul Adare on July 21, 2005, 5:34 pm
Please log in for more thread options
the microsoft.public.windows.server.security news group,

> Hi,
> I've created a certificate template based on default COMPUTER template
> inside CA templates. When I try use that template in GPO autoenrollment
> it is not showing up. why??

You're talking about Automatic Certificate Request Services here, and
not autoenrollment. ACRS only supports computer certificates, and only
V1 templates. You're trying to add a V2 template which can't be done.

>
> When I try to generate certificate on the CLIENT throug MMC, if I use
> Win XP no problem. If I use Win 2K I can't see the computer template I
> created, but I can see the default COMPUTER template. why??

Again, V2 template. Windows 2000 clients won't see any V2 templates
through the MMC.


--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea


Posted by rbaddanki on July 21, 2005, 2:42 pm
Please log in for more thread options
Hi Paul,
Thanks a lot.

Then how to create V1 template on Windows 2003??

Thanks,
Ramesh



Posted by Paul Adare on July 21, 2005, 6:07 pm
Please log in for more thread options
the microsoft.public.windows.server.security news group,

> Then how to create V1 template on Windows 2003??
>

You can't. You can only use the V1 templates that ship with the OS.
Perhpas is you explained your requirements in a bit more detail we could
be of more help. Why do you feel that you need a custom computer
template?

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea


Posted by rbaddanki on July 21, 2005, 4:48 pm
Please log in for more thread options
Hi Paul,
We are trying to do machine authentication using certificates. I need a
template that can publish the certs in ActiveDirectory, later the
server module can get the public key from it and verify the signature
from client. Also I want subject name of the certificate to be FQDN,
this is required to query AD (to construct ldap url).

So if I use default COMPUTER template I can't do the above.

Thanks,
Ramesh.



Similar ThreadsPosted
CA certificate template custom subject name format January 9, 2007, 1:49 pm
CA certificate template custom subject name format January 16, 2007, 12:11 am
Certificate Enrollment w Firefox and Custom Template February 21, 2007, 8:03 pm
"No Certificate Templates Could Be Found" Error Message When User Requests Certificate from CA Web Enrollment Pages September 21, 2006, 1:31 pm
Certificate templates with standalone CA October 7, 2005, 4:07 pm
Certificate Templates and third party CSP January 5, 2006, 8:11 am
SCEP and certificate templates June 11, 2006, 9:07 am
Cannot Add Certificate Templates To Enterprise CA December 14, 2006, 7:45 pm
Duplicate Certificate templates January 28, 2008, 9:18 am
Cannot request computer certificate. January 6, 2006, 1:00 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap