The creation of a certificate enrollment policy for the Certificate Enrollment Policy Web Service (CEP) fails with the error message "This ID conflicts with an existing ID."

Assume the following scenario:

• A Certificate Enrollment Policy Web Service (CEP) is implemented in the network.
• An enrollment policy is configured.
• Testing the connection fails with the following error message:

The URI entered above has ID: "{{GUID}}". This ID conflicts with an existing ID.

The Certificate Enrollment Web Services (Certificate Enrollment Policy Web Service, CEP, and Certificate Enrollment Web Service, CES) enable the automatic request and renewal of certificates from a certification authority via a Web-based interface. This eliminates the need to contact the certification authority directly via Remote Procedure Call (RPC). For a more detailed description, see the article "Certificate request basics via Certificate Enrollment Web Services (CEP, CES)„.

Cause

This error occurs when a certificate enrollment policy already exists with the same GUID. Often this occurs because the default Active Directory enrollment policy is still configured. Its GUID is identical to that of the Active Directory forest.

Related links:

• Performing a functional test for the Certificate Enrollment Policy Web Service (CEP)