Certification Authority cannot use certificate template

Certification Authority cannot use certificate template
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Certification Authority cannot use certificate template Carma Trepp 06-12-2007
Posted by =?Utf-8?B?Q2FybWEgVHJlcHA=?= on June 12, 2007, 11:44 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi all

Our CA has problems to sign Certificate requests. The errors tells me about
problems with the Certificate Templates.
When I try to sumbit a new request I get the following error:
The request contains no certificate template information. 0x80094801
(-2146875391)
Denied by Policy Module 0x80094801, the request does not contain a
certificate template extension or the Certificate Template request attribute.

I find the problem here:
http://support.microsoft.com/?scid=kb%3Ben-us%3B910249&x=14&y=14

But no solution. And there is a link to a very big article. But I dont find
the desired information. I must say I`m new to Microsoft CA. But I hope I can
solve the problem.

Carma

Posted by Brian Komar on June 12, 2007, 3:39 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Tue, 12 Jun 2007 08:44:00 -0700, Carma Trepp wrote:

> Hi all
>
> Our CA has problems to sign Certificate requests. The errors tells me about
> problems with the Certificate Templates.
> When I try to sumbit a new request I get the following error:
> The request contains no certificate template information. 0x80094801
> (-2146875391)
> Denied by Policy Module 0x80094801, the request does not contain a
> certificate template extension or the Certificate Template request attribute.
>
> I find the problem here:
> http://support.microsoft.com/?scid=kb%3Ben-us%3B910249&x=14&y=14
>
> But no solution. And there is a link to a very big article. But I dont find
> the desired information. I must say I`m new to Microsoft CA. But I hope I can
> solve the problem.
>
> Carma

You need to provide more information:
1) How are you requesting the certificate
2) What client are you using
3) What type of certificate are you requesting
4) What OS is the CA running
5) It appears to be an enterprise CA (since it is requesting certificate
templates)

Brian

Posted by =?Utf-8?B?Q2FybWEgVHJlcHA=?= on June 13, 2007, 5:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options


"Brian Komar" wrote:

> You need to provide more information:
> 1) How are you requesting the certificate
> 2) What client are you using
> 3) What type of certificate are you requesting
> 4) What OS is the CA running
> 5) It appears to be an enterprise CA (since it is requesting certificate
> templates)
>
> Brian

1+2) I try to request the certificat in the MMC, and try it in also in the
webinterface(got a similar error regarding the templates)
3) Its a Webserver certificate
4) 2003 Standard
5)Hmm.. where can I verificate this?

I open the the Certificate and it looks this way:
-----BEGIN CERTIFICATE REQUEST-----
<DATA>
-----END CERTIFICATE REQUEST-----

Posted by Brian Komar on June 13, 2007, 10:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Wed, 13 Jun 2007 02:52:07 -0700, Carma Trepp wrote:

> "Brian Komar" wrote:
>
>> You need to provide more information:
>> 1) How are you requesting the certificate
>> 2) What client are you using
>> 3) What type of certificate are you requesting
>> 4) What OS is the CA running
>> 5) It appears to be an enterprise CA (since it is requesting certificate
>> templates)
>>
>> Brian
>
> 1+2) I try to request the certificat in the MMC, and try it in also in the
> webinterface(got a similar error regarding the templates)
> 3) Its a Webserver certificate
> 4) 2003 Standard
> 5)Hmm.. where can I verificate this?
>
> I open the the Certificate and it looks this way:
> -----BEGIN CERTIFICATE REQUEST-----
> <DATA>
> -----END CERTIFICATE REQUEST-----

For a Web server certificate, have you tried using the Web Server
certificate request wizard in IIS Manager. This will allow you to populate
the subject information, make the request based on the right template, and
submit the request to the CA>

Also, at the CA, ensure that the Web server certificate template is
available at the CA.
Since you are running standard edition, you cannot do any certificate
template customization (only enterprise edition supports the issuance of v2
certificate templates). But, Web Server is a v1 template

Brian

Posted by =?Utf-8?B?Q2FybWEgVHJlcHA=?= on June 14, 2007, 2:25 am
If you were  Registered and logged in, you could reply and use other advanced thread options
"Brian Komar" wrote:

> For a Web server certificate, have you tried using the Web Server
> certificate request wizard in IIS Manager. This will allow you to populate
> the subject information, make the request based on the right template, and
> submit the request to the CA>
>
> Also, at the CA, ensure that the Web server certificate template is
> available at the CA.
> Since you are running standard edition, you cannot do any certificate
> template customization (only enterprise edition supports the issuance of v2
> certificate templates). But, Web Server is a v1 template
>
> Brian
>


The Webserver Template is also available on the CA.
But was a good idea with the IIS wizard. I try now a Workaround to use the
Wizard to create the Certificate for the linux Webserver.

I m go in holiday this evening, and cant read this tread futher.
Thanks for the help.

Similar ThreadsPosted
Which certification authority to use July 18, 2005, 4:02 pm
Getting rid of my Certification Authority April 25, 2008, 3:56 pm
Microsoft Certification Authority May 17, 2006, 1:03 pm
The certification authority denied the request. October 11, 2005, 3:08 am
How to clean AD from enterprise certification authority July 10, 2006, 4:53 pm
Certification Authority 0x8009480f error April 25, 2008, 9:15 am
Certification Authority remote calls problem February 10, 2006, 11:41 am
what type of certificate authority? June 16, 2005, 4:08 pm
Certificate Authority type June 16, 2005, 6:01 pm
Problem with certificate authority January 27, 2006, 9:03 am

The site map in XML format XML site map

Contact Us | Privacy Policy