I've been following these instructions http://technet.microsoft.com/en-us/library/cc732526.aspx I've created a copy of the OCSP Response Signing template and added the issuing server name (computer object) to the security tab with read, enroll & autoenroll set to allow. I've also ticked the box 'Publish in Active Directory'. The certificate appears in the CA\certificate templates on the server OK, but when I request a new certificate using the certificate snap-in it does not show up (other certificates I have created do show up however). Thanks, Rich.

Richard - this post belongs on the Security forum http://social.technet.microsoft.com/Forums/en/winserversecurity/threads hth Marcin

I've been following these instructions http://technet.microsoft.com/en-us/library/cc732526.aspx I've created a copy of the OCSP Response Signing template and added the issuing server name (computer object) to the security tab with read, enroll & autoenroll set to allow. I've also ticked the box 'Publish in Active Directory'. The certificate appears in the CA\certificate templates on the server OK, but when I request a new certificate using the certificate snap-in it does not show up (other certificates I have created do show up however). Thanks, Rich. At first, you made 2 mistakes: 1) do not grant Autoenroll permissions for OCSP Signing template. Just grant Read and Enroll. 2) do not enable checkbox to publish certificate to Active Directory. It is not necessary and may lead to replication issues. 3) do not forget to add private key read permissions to Network Service accoun in Request Handling tab. what OS runs your CA?My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

Hi, I'm writing to ask how about the issue's current status, if there is anything we can do for you, please feel free to tell us. Regards, Cicely