CA template issue
Hi
I am running an enterprise CA on windows 2000.I want to issue a new certificate to one of my web server.
When I try to select the web server certificate template from the certification authority, the following error pops up:
"The template information on the CA cannot be modified at this time. This is most likely because the CA service is not running or there are replication delays.One or more certificate templates to be enabled on this certification authority could not be found 0x80094813
(-2146875373)
The changes can be saved to Active Directory and retrieved by the CA next time it is started.Do you want to save the changes to Active Directory?"
Microsoft support pages says the authenticated users have to be a member in the security group of the CA and have read access to the CA. But it is already enabled in my scenario.
Does anyone have a different thought or a solution. Appreciate it
Thanks
April 26th, 2012 6:06am
I would use the Certificate Template Manager or ADSIedit to verify the integrity of the certificate template information that is stored in Active Directory.
Also check that you haven't deleted a Certificate Template that the CA expects to be using...
Cheers
JJJason Jones |
Forefront MVP | Silversands Ltd | My Blogs:
http://blog.msedge.org.uk and
http://blog.msfirewall.org.uk
Free Windows Admin Tool Kit Click here and download it now
April 26th, 2012 8:20am
The certificate template is available in the AD.
I can issue all templates except the web server template.
FYI, my AD is server 2008 and CA is server 2000.
Regards
April 26th, 2012 10:33pm
How are you attempting to request the certificate?
How is the subject configured for the certificate template?
Brian
Free Windows Admin Tool Kit Click here and download it now
April 27th, 2012 1:48am
Log into certification authority, under certificate templates, click on new template to issue.
When I try to issue template for web server it comes up with the above error.
All other templates can be successfully issued.
May 1st, 2012 10:34pm
Hi,
Please also verify Active Directory Replication:
Verify Active Directory Replication
http://technet.microsoft.com/en-us/library/cc816863(v=ws.10).aspx
Then, restart certificate service and test the problem again.
Free Windows Admin Tool Kit Click here and download it now
May 7th, 2012 7:22am


