PKI Question
We are getting the following PKI error when trying to enroll a certificate on our W2K3 R2 Servers
Microsoft Active Directory Certificate Services -- dmz-ca8001
Home
Certificate Request Denied <!-- Green HR -->
Your certificate request was denied.
Your Request Id is 36. The disposition message is "Denied by Policy Module".
Contact your administrator for further information.
<!-- Green HR -->Bill Bacoyiannis
February 16th, 2010 10:59pm
Hi Bill,
This error may be caused by incorrect permission settings. Please try the steps below on CA Server to check (you need to have proper permission):
1. Click Start, click Run, type certtmpl.msc and then press Enter.2. Right-click the template that you would like to request and select Properties.3. Select the Security tab.4. Select Add.5. Add Authenticated Users, select Read and Enroll, and select OK. Authenticated Users allowed the Certification Authority computer account to have Read access to the certificate template.
If the issue persists, please let us know which template you’re trying to request certificate from and how did you configure the template. Could you request other certificates from the same server?
Thanks.This posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
February 17th, 2010 11:51am


