2008 R2 cannot issue certificate templates
i am running standard 2008 R2 as the OS on my enterprise CA. domain and forest functional levels are 2008 R2. i can create (duplicate) new templates, and i can see them in the Configuration partition in ADSIedit. and yes they are replicated to all domain controllers. when i try to issue them they are unavailable in the list of "new templates to issue." the list only has templates which (in the certificate templates console) show a minimum CA version of Windows 2000. none of the "windows 2003 enterprise" or "windows 2008 enterprise" templates are available for me to issue.
December 11th, 2010 1:21am

On Fri, 10 Dec 2010 22:21:43 +0000, CurtMcgirt wrote: ?i am running standard 2008 R2 as the OS on my enterprise CA. domain and forest functional levels are 2008 R2. i can create (duplicate)?new templates, and i can see them in the Configuration partition in ADSIedit. and yes they are replicated to all domain controllers. when i try to issue them they are unavailable in the list of "new templates to issue." the list only has?templates which (in the certificate templates console) show a minimum CA version of Windows 2000. none of the "windows 2003 enterprise"?or "windows 2008 enterprise" templates are available for me to issue. Was this a clean install of R2 or an upgrade from a previous version of Windows Server? If the latter then: certutil -setreg ca\setupstatus +512 net stop certsvc net start certsvc Paul Adare MVP - Identity Lifecycle Manager http://www.identit.ca
Free Windows Admin Tool Kit Click here and download it now
December 11th, 2010 8:51am

Paul, thank you, thank you, thank you. this box was in fact upgraded from 2003 x64 to 2003 R2 x64 to 2008 to 2008 R2. now how do i get my new template to appear on the web enrollment page?
December 14th, 2010 7:58pm

I also had this problem right now, from 6 machines, 3 are showing the same problem. The machines were NOT upgraded from any version, they are 2008 R2 native. What's the reason for this problem? And: What's the meaning of the above registry key? Why do you add 512 to its value? Thanks, B.
Free Windows Admin Tool Kit Click here and download it now
February 24th, 2011 3:33pm

Had the same exact issue, I'd also like to know what this corrected.
August 22nd, 2011 10:41pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics