Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've had for a long time a 2003 AD Root CA in the domain and Admins have been able to request certificates to this CA through IIS interface without the need to generate a request file using the Create Domain Certificate feature.

Recently I added a new 2008 R2 AD Root CA in the domain and the root certificate has been propagated to the whole network as a trusted Root CA certificate.

If I go to IIS on any server or my local computer the new CA is not listed when trying to create a new domain certificate.

My AD DS functional level is 2003

Both CAs are NOT domain controllers

Can someone lead me to find a solution


share|improve this question

Have you set it up as Enterprise CA?

share|improve this answer
Yes, this was setup as Enterprise CA – Arturo Martinez Jul 27 '12 at 20:28

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.