Role configuration for Network Device Enrollment Service (NDES) fails with error message "Failed to Enroll RA certificates. The requested certificate template is not supported by this CA. 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE)"

Assume the following scenario:

• One installs a Network Device Enrollment Service (NDES) server
• One has the necessary permissions to install the role (local administrator, enterprise administrator)
• The role configuration fails with the following error message:

Failed to enroll RA certificates. The requested certificate template is not supported by this CA. 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE)

The Network Device Enrollment Service (NDES) provides a way for devices that do not have an identifier in Active Directory (for example, network devices such as routers, switches, printers, thin clients, or smartphones and tablets) to request certificates from a certification authority. For a more detailed description, see the article "Network Device Enrollment Service (NDES) Basics„.

Cause

This error occurs when the system on which the NDES server is installed cannot establish the chain of trust for the requested Registration Authority (RA) certificates, for example, because it does not know the root certification authority certificate.

See also article "Certificate request fails with error message "The requested certificate template is not supported by this CA. 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE)."„.

Related links:

• Performance problems with auditing of "Start and stop Active Directory Certificate Services".
• Configuration of security event monitoring (auditing settings) for certification authorities
• Installing the Network Device Enrollment Service (NDES) without Enterprise Administrator permissions