Windows 2003 Certification authority: failed requests

Discussion in 'Windows Server' started by Januar, Jul 24, 2006.

  1. Januar

    Januar Guest

    Hi,
    I tried to install CA service on a Windows 2003 SP1 server. This server is a
    member domain of a 2003 SP1 domain. I selected Enterprise root CA. After
    installation completed, I found many failed requests in the Certification
    Authority console. It says:
    "The requested certificate template is not supported by this CA.
    0x80094800.... Denied by Policy Module 0x80094800, the request was for a
    certificate template that is not supported by the Certificate Services
    policy: DomainController".

    In the event viewer (application log) I found many warnings, one of repeated
    warning is:

    Date: 7/19/2006
    Time: 10:56:43 PM
    Type: Warning
    User: N/A
    Computer: NI1-SGP1
    Source: CertSvc
    Category: None
    Event ID: 53
    Description: Certificate Services denied request 2 because The requested
    certificate template is not supported by this CA. 0x80094800 (-2146875392).
    The request was for GLOBAL\DC2-SGP2$. Additional information: Denied by
    Policy Module 0x80094800, The request was for a certificate template that is
    not supported by the Certificate Services policy: DomainController.

    Since there are many DCs, the same warning was issued for different DCs.

    There are also some warnings which tell about different certificate template
    (SubCA, domain controller, administrator, user, EFS, web server). The
    following one is talking about the domain controller template:

    Date: 7/19/2006
    Time: 10:40:32 PM
    Type: Warning
    User: N/A
    Computer: NI1-SGP1
    Source: CertSvc
    Category: None
    Event ID: 77
    Description: The "Windows default" Policy Module logged the following
    warning: The DomainController(v0.0): V1 Certificate Template could not be
    loaded. Element not found. 0x80070490 (WIN32: 1168).

    Please advise. Thank you in advance.
     
    Januar, Jul 24, 2006
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.