Tag: pKIEnrollmentService

Assume the following scenario:

• An Active Directory integrated certification authority (enterprise CA) is integrated in the network.
• The certification authority was migrated to a new server (see also the article "Migration of an Active Directory integrated certification authority (Enterprise Certification Authority) to another server ").
• When publishing the certificate templates, one notices that only the default certificate templates can be selected for publication. Custom certificate templates are not displayed.

Continue reading "After installing or migrating a certification authority to a new server, you can no longer publish your own certificate templates"

Assume the following scenario:

• You try to request a certificate from an Active Directory integrated certification authority (enterprise CA).
• To do this, you use the Microsoft Management Console (MMC), either for the logged-on user (certmgr.msc) or for the computer (certlm.msc).
• However, the desired certificate template is not offered for selection, even though it has been correctly published on the certification authority.
• The logged-on user (or computer) also has the necessary permissions to request certificates from the certificate template in question (Enroll).
• In the list of available certificate templates within the MMC, you have all certificate templates displayed. The desired certificate template shows:

A valid certification authority (CA) configured to issue certificates based on this template cannot be located, or the CA does not support this operation, or the CA is not trusted.

Continue reading "Requesting a certificate fails with the error message "A valid certification authority (CA) configured to issue certificates based on this template cannot be located, or the CA does not support this operation, or the CA is not trusted.""