Publishing a certificate template on a CA fails with error message "The template information on the CA cannot be modified at this time. This is most likely because the CA service is not running or there are replication delays. Access is denied. 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)".

Author Uwe GradeneggerPosted on Categories Active Directory, TroubleshootingTags

Assume the following scenario:

  • An administrator publishes a certificate template on a certificate authority.
  • The operation fails with the following error message:
The template information on the CA cannot be modified at this time. This is most likely because the CA service is not running or there are replication delays. Access is denied. 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)

Possible causes can be:

  • The permissions of the certification authority computer on the pKIEnrollmentService object in the Active Directiory are incorrect.

Details: The permissions of the certification authority computer on the pKIEnrollmentService object in the Active Directiory are incorrect.

The "Write" right is not sufficient. Besides "Write" is needed:

  • Delete
  • Modify
  • Modify Owner

Related links:

One thought on “Das Veröffentlichen einer Zertifikatvorlage auf einer Zertifizierungsstelle schlägt fehl mit Fehlermeldung „The template information on the CA cannot be modified at this time. This is most likely because the CA service is not running or there are replication delays. Access is denied. 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)“”

  1. Pingback: Performing a functional test for a Certification Authority - Uwe Gradenegger

Comments are closed.

en_USEnglish
de_DEDeutsch en_USEnglish