I have active directory environment in 2003 R2. I have installed 2008 R2 Enterprise Edition CA. Then I have created custom template from web server template and add expiry date as 15 years. my root certificate is valid for 25 years. Then I went to templates and and remove the default web server template and added the newly created template. Then I tried to request a certificate through IIS in another server in domain. But it is not issuing the certificate. When I check it in the CA fail certificate, the error occurred.
Denied by policy module 0x80094800 the request was for a certificate template that is not supported by Active Directory certificate service policy: webserver
I have tried certutil -setreg CA\ValidityPeriodUnits 21 It is not working.
When I remove the custom template and added the Web server template it issues only 2 year valid certificate.