5

I'm having a problem similar to that posted in this question:

Missing Certificate template From certificate to issue

The short version is that I've created a duplicate certificate template and I'm trying to add it to my domain CA so that I can issue certificates with it. However, when I go into the Certification Authority MMC and go to "Certificate Templates -> New -> Certificate Template To Issue", my template is missing (along with quite a number of other templates that are present in the domain).

Unlike the previous question, however, my CA is running on Server 2008 R2 Enterprise. Our organization has a single DC and a single CA, so I'm not seeing where there could be propagation delay.

Any ideas how to get my template to show so that I can issue certificates?

3

Just wanted to throw this out there for future searchers who this doesnt apply to. For me, I had to go into ADSI Edit and change a flag from 2 to 10. I did have to restart ADCS service afterwards before the cert became available.

"...ADSIEdit.msc, then expand CN=Configuration | CN=Services | CN=Public Key Services | CN=Enrollment Services. Right click the CA in the right pane that you want to enroll from and click properties. Find the flags attribute; and verify that it is set to 10. If it isn’t set to 10, then set it to 10 using ADSIedit.msc and allow for Active Directory replication to complete."

http://securitymusings.com/article/1733/cant-create-a-new-certificate-template-to-issue

1

Does the account that is looking to use the template have the rights to do so? in the mgmt console, right click the Certificate template container and select manage templates. For the missing template, right click and select properties. On the security tab, ensure the account that wants to request the cert has the right to enroll.

  • 1
    I can't get as far as a request, because I can't add the template to the CA. In the spirit of answering your question, though, yes. – Adam Robinson Oct 11 '11 at 20:05
  • You should be doing this through the CA Mgmt interface. The same place where you went to duplicate the template – uSlackr Oct 12 '11 at 12:54
  • Managing the templates is done in the "Certificate Templates Console", which connects to a DC. I'm now trying to add the template created there in the Certification Authority interface, which connects to a CA, and that's where it's not appearing. – Adam Robinson Oct 12 '11 at 13:16
0

If you are hunting for why the newly created template is not showing up for "Certificate Template To Issue", I ran into this on server 2012 R2. Just to try something, I stopped and restarted the certificate authority services and then the newly created template showed up. If, for nothing else, it can't hurt to try it if you cant see your new template.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.