Click here to get back home

Help issuing computer certificate template not available?

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Help issuing computer certificate template not available? Vo 03-07-2006
Posted by Vo on March 7, 2006, 4:32 pm
Please log in for more thread options
Okay, I'm thoroughly confused, it's been a while since I have issued a
computer certificate to a new server.

Here's my setup:

My Enterprise Root CA is offline, turned on just to sign CRLs every six
months. It's 2003 Standard.

My Issuing CA is online, works great. It's 2003 SP1 Enterprise. I have
a custome certificate template called "RAS and IAS Server
Authentication" that I've used to issue a cert to this same machine.
It's running IAS.

I have a second machine, 2003 Standard. I'm trying to request a "RAS
and IAS Server Athentication" template certificate, but it's not giving
me the option. My understanding is that I don't need enterprise to use a
published certificate template for this.

Why can't I get this certificate as an option? I'm trying this from the
MMC snap-in, and there's no option on the http://certserv/certsrv
interface to select this template either. I don't remember how I even
got this issued on the Issuing CA machine to itself originally?!

The use for this is EAP authentication against IAS, by the way.

Edd.

Posted by Paul Adare on March 9, 2006, 7:24 am
Please log in for more thread options
microsoft.public.windows.server.security news group, Vo <vo243
@hotmail.removeme.com> says...

> I have a second machine, 2003 Standard. I'm trying to request a "RAS
> and IAS Server Athentication" template certificate, but it's not giving
> me the option. My understanding is that I don't need enterprise to use a
> published certificate template for this.
>
>

This template is a version 2 template which are only available from a CA
running Windows Server 2003 Enterprise Edition or above.

--
Paul Adare - MVP Virtual Machines
It all began with Adam. He was the first man to tell a joke--or a lie.
How lucky Adam was. He knew when he said a good thing, nobody had said
it before. Adam was not alone in the Garden of Eden, however, and does
not deserve all the credit; much is due to Eve, the first woman, and
Satan, the first consultant." - Mark Twain

Similar ThreadsPosted
Problems requesting computer certificates on an issuing CA March 21, 2006, 8:03 am
Is it possible to .PFX file when creating/issuing a certificate July 5, 2007, 12:04 pm
Restrict AD-User to one X509 Certificate per Certificate template? July 12, 2007, 12:18 pm
Autoenrollment problems - Enrollment access is not allowed to this template computer September 1, 2006, 4:02 pm
Certificate Template Name: CA October 20, 2005, 8:35 pm
New Certificate Template Missing February 1, 2006, 12:09 pm
Can't enable Certificate Template??? May 25, 2006, 5:03 pm
Enable the created certificate Template June 18, 2007, 11:55 am
Publish duplicate Certificate template October 4, 2007, 10:15 am
CA certificate template custom subject name format January 9, 2007, 1:49 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap