In the CA Web Enrollment website, on the "Submit a Certificate Request or Renewal Request" page (https://<servername>/certsrv/certrqxt.asp) there is a dropbox under the "Certificate Template:" section with values for various certificate template types. I have a custom template that I would like to issue a cert for; how can I get that particular template name to be added to this list, or is it pre-defined by Microsoft and unchangeable?


Since no one answered and I needed an answer to this one, bucked up and opened a per-incident support ticket with MSFT Support. Per MSFT Support, the Web Enrollment "Certificate Template" dropbox is NOT extensible. It's designed to be a simple way to request/recieve User and Web Server certificates.

I have to use certlm.msc (Certificate Management for Local Machine), right-click on Personal > Certificates, and choose "All Tasks > Request New Certificate" to be able to choose my custom template. Once the certificate is issued (lands in the Local Machine's Personal Certificates folder) you can then export it as a .pfx, use the .pfx to install the cert to the target machine (don't forget to mark the private key as exportable when you request the cert!) and then delete the already-exported cert out of the local machine's cert store. Ugly, but it works...

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.