Requesting certificates via Enroll on Behalf of (EOBO) is not possible because the certificate template is not displayed. The error message is "The certificate template requires too many RA signatures."

Uwe GradeneggerJanuary 2021February 2021TroubleshootingEnroll on Behalf of (EOBO), Enrollment Agent, Registration Authority (RA)

Assume the following scenario:

A certificate is requested for a user or a computer from a certificate authority via the certificate management console (certlm.msc or certmgr.msc).
One uses here the Enroll on Behalf of (EOBO) Mechanism.
The desired certificate template is not displayed.
If you check the "Show all templates" checkbox, the following error message will be displayed for the desired certificate template:

The certificate template requires too many RA signatures. Only one RA signature is allowed. Multiple request agent signatures are not permitted on a certificate request.

Cause

Occurs when the certificate template has too many or even no enrollment agents configured. Enroll on behald of requires exactly one signature.

This setting is configured in the Issuance Requirements tab.

One thought on “Die Beantragung eines Zertifikats über Enroll on Behalf of (EOBO) ist nicht möglich, da die Zertifikatvorlage nicht angezeigt wird. Die Fehlermeldung lautet „The certificate template requires too many RA signatures.“”

Pingback: Basics: Enroll on Behalf of (EOBO) - Uwe Gradenegger

Comments are closed.

English

Cause

Related links:

One thought on “Die Beantragung eines Zertifikats über Enroll on Behalf of (EOBO) ist nicht möglich, da die Zertifikatvorlage nicht angezeigt wird. Die Fehlermeldung lautet „The certificate template requires too many RA signatures.“”