No certificates templates in Certification Authority MMC Snap-in

Discussion in 'Server Security' started by Yannick Béot, Oct 11, 2004.

  1. Hi,

    I'm trying to configure a stand-alone Certificate authority

    I wrote a CAPolicy.inf to set up the CRL Distribution Point (CDP) and
    the AIA

    The certificate authority was apparently correctly installed but when I
    open the Certification Authority MMC Snap-in, there is no folder
    "certificates templates"

    When I open the Certificates templates MMC Snap-in, it tells me that the
    computer is not a member of a domain, which is correct. The stand-alone
    CA will be off line so what can I do?

    Thanks in advance

    Yannick
     
    Yannick Béot, Oct 11, 2004
    #1
    1. Advertisements

  2. Yannick Béot

    Miha Pihler Guest

    1. Advertisements

  3. Hi,

    I don't even want change the certificates templates. No certificates
    templates folders appears in the certification authority snap-in

    It's asking me for a domain controller but I did setup a stand-alone CA
    and I don't want it to connect to an Active Directory

    I did not find anything like this in this forum and nothing in the
    troubleshootings

    Yannick
     
    Yannick Béot, Oct 11, 2004
    #3
  4. Yannick Béot

    Miha Pihler Guest

    Certificate template folder (container) will only appear on Enterprise setup
    of CA service.

    Mike
     
    Miha Pihler, Oct 11, 2004
    #4
  5. Hi,

    I'm asking everyone to see if there is indeed a problem or not.
    Does a stand-alone Certification Authority have a certificates templates
    database?

    If not, this is normal that there is no folder "certificates templates"
    in the certification authority snap-in, isn't it?

    Tell me

    Yannick
     
    Yannick Béot, Oct 11, 2004
    #5
  6. Yannick Béot

    Miha Pihler Guest

    If not, this is normal that there is no folder "certificates templates"
    Yes, it is normal that standalone CA doesn't have "certificates templates"
    container.

    Standalone Snap-Shot
    http://freeweb.siol.net/mpihler/standalone.jpg

    Enterprise Snap-Shot
    http://freeweb.siol.net/mpihler/enterprise.jpg

    ***************************************

    Implementing and Administering Certificate Templates in Windows Server 2003
    http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03crtm.mspx

    Mike
     
    Miha Pihler, Oct 11, 2004
    #6
  7. Yannick Béot

    Brian Komar Guest

    Certificate Templates are only usable by "enterprise CAs". Hence your
    standalone CA will *never* have a certificate templates container. For
    a standalone CA, some common certificate types are defined in the WEb
    enrollment pages, and you can, through coding or certreq, create any
    type of certificate, but not by using certificate templates.

    Brian
     
    Brian Komar, Oct 11, 2004
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.