Tag: Certificate enrollment policy

Assume the following scenario:

• You try to request a certificate from an Active Directory-integrated certification authority (enterprise CA).
• To do this, use the Microsoft Management Console (MMC), either for the logged-in user (certmgr.msc) or for the computer (certlm.msc).
• The logged-in user also has the necessary permissions to request certificates from the certificate template in question (Enroll).
• You don't get any certificate templates to choose from, even though they are correctly published on the certification authorities.
• There is also no "Show hidden templates" option. This usually appears at the bottom left of the dialog.
• The following error message is displayed:

Certificate types are not available. You cannot request a certificate at this time because no certificate types are available. If you need a certificate, contact your administrator.

Continue reading "Requesting a certificate fails with the error message "You cannot request a certificate at this time because no certificate types are available.""

After a certificate enrollment policy is configured and used by a subscriber, the results are cached locally (Enrollment Policy Cache).

If changes are now made to the infrastructure, for example by publishing or removing a new certificate template on a certification authority accessible via Certificate Enrollment Web Service (CES), these changes are not immediately visible to subscribers due to the cache.

For this reason, it may be helpful to view or clear the cache.

Continue reading "View and clear the certificate enrollment policy cache for the Certificate Enrollment Policy Web Service (CEP)"

When working with Certificate Enrollment Web Services and manually entering certificate enrollment policies on client computers, one encounters the phenomenon that there is no way to edit or delete them in the Certificates management console.

Continue reading "Deleting a Manually Configured Certificate Enrollment Policy (Enrollment Policy)"

Assume the following scenario:

• A Certificate Enrollment Policy Web Service (CEP) is implemented in the network.
• An enrollment policy is configured.
• Testing the connection fails with the following error message:

The URI entered above has ID: "{{GUID}}". This ID conflicts with an existing ID.

Continue reading "The creation of a certificate enrollment policy for the Certificate Enrollment Policy Web Service (CEP) fails with the error message "This ID conflicts with an existing ID.""

Assume the following scenario:

• A Certificate Enrollment Policy Web Service (CEP) is implemented in the network.
• An enrollment policy is configured.
• Testing the connection fails with the following error message:

Error: The input data was not in the expected format or did not have the expected value. 0x803d0000 (-2143485952 WS_E_INVALID_FORMAT)

Continue reading "Creating a certificate enrollment policy for the Certificate Enrollment Policy Web Service (CEP) fails with error code "WS_E_INVALID_FORMAT""

Assume the following scenario:

• A Certificate Enrollment Policy Web Service (CEP) is implemented in the network.
• An enrollment policy is configured.
• Testing the connection fails with the following error message:

Certificate Request Processor: The remote endpoint does not exist or could not be located. 0x803d000d (-2143485939 WS_E_ENDPOINT_NOT_FOUND) 

Continue reading "Creating a certificate enrollment policy for the Certificate Enrollment Policy Web Service (CEP) fails with error code "WS_E_ENDPOINT_NOT_FOUND""