Cannot issue certs with SANs with my 2003 template but works with 2000 template
Hi Guys,
I have a windows 2003 CA, and when I try to issue a cert with SANS I get the following error:
"Denied by Policy Module 0x80094800, The request was for a certificate template that
is not supported by the Certificate Services policy: WebServer/CompanyWebServer. "
When I use an old basic windows 2000 version template it works!
What could prevent the ca from issuing san certs for 2003 + templates only and not 2000 ?
Thanks
IT Consultant
September 22nd, 2011 5:59pm
This? http://support.microsoft.com/kb/932457
Cheers
JJJason Jones |
Forefront MVP | Silversands Ltd | My Blogs:
http://blog.msedge.org.uk and
http://blog.msfirewall.org.uk
Free Windows Admin Tool Kit Click here and download it now
September 22nd, 2011 6:07pm
Thanks Jason but thats not it, the 3 possibilities listed are not the case and it does work with 2000 templates, I think if it was one of those problems it would be all templates that are wrong.IT Consultant
September 22nd, 2011 8:46pm
You probably need to add the "CompanyWebServer" certificate template to your CA, in the Certification Authority management console, right-click Certificate Templates ans select New -> Certificate Template to Issue...
/Hasain
Free Windows Admin Tool Kit Click here and download it now
September 22nd, 2011 9:16pm
If the template is already published on your CA, check the template permissions and make sure the CA server is listed for read either explicitly or via the "Authenticated Users" group.
/Hasain
September 24th, 2011 7:43am