Certification Authority

Discussion in 'Windows Server' started by timB, Oct 17, 2005.

  1. timB

    timB Guest

    I am trying to set up CA in a lab enviroment to work with EFS. I am using a
    Lab enviroment, which consists of:

    A Windows 2003 DC, 2003 Excahnge server, a number of other test servers,
    test computers and one Windows 2003 Member server. The member server is
    running certificate service as Enterprise root CA.

    However the client computers are not getting certificates from the CA (only
    the self signed personal certificates) and I am getting the following error
    message when I look on the event viewer within the CA server:

    Certificate Services denied request 16 because The requested certificate
    template is not supported by this CA. 0x80094800 (-2146875392). The request
    was for Domain Name\Computer Name.

    Additional information: Denied by Policy Module 0x80094800, The request was
    for a certificate template that is not supported by the Certificate Services
    policy:
    DomainController.

    Any help would be greatly appriciated.
     
    timB, Oct 17, 2005
    #1
    1. Advertisements

  2. Miha Pihler [MVP], Oct 17, 2005
    #2
    1. Advertisements

  3. timB

    timB Guest

    Thanks for your help, but that did not fix this issue. Some further
    information:

    When I try to request a new certificate through IE and I go to 'Request
    Certificate' I receive the following error message on the page:

    "No certificate template could be found. You do not have permission to
    request a certificate from this CA, or an error occured while accessing
    Active Directory"
     
    timB, Oct 18, 2005
    #3
  4. timB

    timB Guest

    Also, when I request a new certificate from the Certificates snap in -
    Current User (Personal Certificates) I receive the following error message:

    The wizard cannot be started because one of the following conditions:
    - There are no trusted certification authorities (CAs) avaliable.
    - You do not have the permissions to request certificates from the avalable
    CAs.
    - The available CAs issue certificates for which you do not have permission
     
    timB, Oct 18, 2005
    #4
  5. Hi,

    What template are you trying to request?
     
    Miha Pihler [MVP], Oct 28, 2005
    #5
  6. timB

    timB Guest

    Hi,

    I have managed to resolve this issue, there was an issue with the domain.

    Thanks Again,

    Tim
     
    timB, Oct 28, 2005
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.