Click here to get back home

Unable to find Key Recovery Agent template!!!
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Unable to find Key Recovery Agent template!!! busn66 07-08-2005
Posted by busn66 on July 8, 2005, 11:28 am
Please log in for more thread options
 I have run into an unusual problem in regards to implimenting Key
archiving and recovery. According to both MS documentation and other
threads, I need to issue a new template named "Key Recovery Agent" --
the problem is when I click on 'Certificat template to issue' there is
no "Key Recovery Agent" template to select!

I checked for available templates using "certtmpl.msc" on the CA server
and there is definately a "Key Recovery Agent" template listed (Ver
105.1) and marked 'Allowed'. However, it does not show up in the list
of Certificate Templates to enable.

The CA is on a Server 2003 Standard with SP1.

Any ideas or suggestions would be appreciated.

Thanks in advance!



Posted by Steven L Umbach on July 8, 2005, 3:03 pm
Please log in for more thread options
 You would need to be running an Enterprise CA installed on Windows 2003
Enterprise Server in order to do such. If you look at "minimum supported CA"
when looking at the certificate templates it will show that
formation. --- Steve


>I have run into an unusual problem in regards to implimenting Key
> archiving and recovery. According to both MS documentation and other
> threads, I need to issue a new template named "Key Recovery Agent" --
> the problem is when I click on 'Certificat template to issue' there is
> no "Key Recovery Agent" template to select!
>
> I checked for available templates using "certtmpl.msc" on the CA server
> and there is definately a "Key Recovery Agent" template listed (Ver
> 105.1) and marked 'Allowed'. However, it does not show up in the list
> of Certificate Templates to enable.
>
> The CA is on a Server 2003 Standard with SP1.
>
> Any ideas or suggestions would be appreciated.
>
> Thanks in advance!
>




Posted by aptrsn on July 15, 2005, 1:50 pm
Please log in for more thread options
Thanks the reply, I now see that is the case. So unless your running
the Enterprise version of Windows 2003 Server, you have no way of Key
Archiving and Recovery?



Posted by Paul Adare on July 15, 2005, 5:15 pm
Please log in for more thread options
the microsoft.public.windows.server.security news group, aptrsn <busn66
@hotmail.com> says...

> Thanks the reply, I now see that is the case. So unless your running
> the Enterprise version of Windows 2003 Server, you have no way of Key
> Archiving and Recovery?
>
>

Correct.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea


Similar ThreadsPosted
Problems setting up the Recovery Agent December 19, 2006, 1:26 pm
How to add a domain user as a Data Recovery Agent June 30, 2006, 1:48 pm
Data Recovery Agent exspired in Windows 2003 AD May 17, 2006, 7:45 am
Can't find valid certificate June 27, 2006, 12:27 pm
Find SID for a local user Account March 6, 2006, 3:05 pm
Find Huge MCSE resources... June 26, 2007, 6:40 am
How could I find invisible user in admin group? August 12, 2005, 8:34 am
Key Distribution Center (KDC) cannot find a suitable certificate July 24, 2008, 10:55 am
where to find a list of Windows 2003 security event id's ? October 26, 2006, 8:44 am
CA Services enrollment agent and templates January 10, 2008, 11:02 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap