"No Certificate Templates Could Be Found" Error Message When User Requests Certificate from CA Web Enrollment Pages

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
"No Certificate Templates Could Be Found" Error Message When User Requests Certificate from CA Web Enrollment Pages Bowulf 09-21-2006
Posted by Bowulf on September 21, 2006, 1:33 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I am having some problem with users (even other domain admins)
requesting certificates. I am sending them to the certificate server
webpage, and when they click on the link Create and submit a request to
this CA, they get the following error message:

"No certificate templates could be found. You do not have permission to
request a certificate from this CA, or an error occurred while
accessing the Active Directory."

I (an enterprise admin) can authenticate and request a certificate, but
I verified the error message occurs with other domain admins like I
said. I checked the KB article
(http://support.microsoft.com/?id=811418) that deals with this error,
and did not see any difference (case or otherwise) between the two
strings (dNSHostName attribute and the the value for sServerConfig). I
nevertheless copied and pasted the value to the other server. The same
error still occured when the user shutdown and restarted IE.

Any other suggestions?

Kent A


Posted by Brian Komar [MVP] on September 21, 2006, 6:49 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Have you properly set permissions on the certificate templates (just
guessing that you have two or more domains in your forest).

See the certificate templates white paper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technolog
ies/security/ws03crtm.mspx
Brian


bowulf@gmail.com says...
> I am having some problem with users (even other domain admins)
> requesting certificates. I am sending them to the certificate server
> webpage, and when they click on the link Create and submit a request to
> this CA, they get the following error message:
>
> "No certificate templates could be found. You do not have permission to
> request a certificate from this CA, or an error occurred while
> accessing the Active Directory."
>
> I (an enterprise admin) can authenticate and request a certificate, but
> I verified the error message occurs with other domain admins like I
> said. I checked the KB article
> (http://support.microsoft.com/?id=811418) that deals with this error,
> and did not see any difference (case or otherwise) between the two
> strings (dNSHostName attribute and the the value for sServerConfig). I
> nevertheless copied and pasted the value to the other server. The same
> error still occured when the user shutdown and restarted IE.
>
> Any other suggestions?
>
> Kent A
>
>

Similar ThreadsPosted
Certificate Enrollment API: Request on behalf of another user February 13, 2008, 9:02 pm
Security Certificate Error message when visiting my bank web-site November 20, 2006, 8:58 am
How to clear the Certificate Services "failed requests" log March 16, 2006, 1:56 pm
Certificate Templates March 7, 2007, 4:50 pm
how to backup Certificate templates November 1, 2005, 10:15 pm
Web Certificate Enrollment security problem March 15, 2006, 2:57 am
Problem with WLAN IAS certificate enrollment May 16, 2008, 11:51 am
Certificate Templates and Web Access to Certs August 31, 2008, 8:41 am
Certificate Web Enrollment (Server 2003 and Vista) November 14, 2008, 12:16 pm
Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 May 18, 2006, 5:04 pm

The site map in XML format XML site map

Contact Us | Privacy Policy