Template does not show up in Web Enrollment pages.
We duplicated the Web Server version 1 template on our Windows 2003 Server CA and published it to the CA for issuence. Set the permissions accordingly, Domain Admins: Read, Write, Enroll Then when we go to a Windows Server 2008 R2 Enterprise server login with an account with Domain Admins and run http://OurServer/certsrv to submit an Advanced Certificate Request we can not see that template. Days went by from the time we made the template and tried the request. The CA was stopped and restarted. Other duplicate temples do show up just not this one, any ideas?
March 23rd, 2010 6:54pm

I had a similar situation with a copy of a Computer template not showing up on the CertSrv site. I called Microsoft and the technician said to change the setting from "Build from this Active Directory information" to "Supply in the request" on the "Subject Name" tab of the certificate template. I don't know if this is the best option for you, but it worked to make it available via CertSrv...
Free Windows Admin Tool Kit Click here and download it now
March 23rd, 2010 7:43pm

at first, Windows Server 2008 and higher requires that you access to Web Enrollment Pages using HTTPS only.http://www.sysadmins.lv
March 23rd, 2010 8:11pm

I had a similar situation with a copy of a Computer template not showing up on the CertSrv site. I called Microsoft and the technician said to change the setting from "Build from this Active Directory information" to "Supply in the request" on the "Subject Name" tab of the certificate template. I don't know if this is the best option for you, but it worked to make it available via CertSrv... Joe I tried your advice and the template did show up, however that makes no sense since I have two other templates, a User template and a Basic EFS template that build the Subject Name from Active Directory and those two show up fine. I bet it's some built in feature of the Web Enrollment pages that treats different templates differently, just like the IIS certificate Wizard and the Web Server template. I hope I am wrong.
Free Windows Admin Tool Kit Click here and download it now
March 23rd, 2010 8:31pm

at first, Windows Server 2008 and higher requires that you access to Web Enrollment Pages using HTTPS only. http://www.sysadmins.lv I was thinking about that, but I just tested and both HTTP: and HTTPS: work for us from a Windows 2008 box to a Windows 2003 CA.
March 23rd, 2010 8:33pm

Hey G-r-e-g. I agree - it makes no sense. I saw the other posts about https, but I believe that's mostly the browser version that is being used (unless you've secured the web site). As for my situation - what the tech said was OK, because I did need to supply the info in the request (for those certificates). I noticed that some of my computer or user based templates didn't show up until I set the security to allow the specific user read access (I've enabled URL Authorization) or granted read access to Domain User (or Authenticated Users). I'll poke around a bit if I get a chance...
Free Windows Admin Tool Kit Click here and download it now
March 24th, 2010 6:00am

Is this a version 2 or version 3 template? Version 3 templates are not supported by Web Enrollment Pages (see for example http://blogs.technet.com/ad/archive/2008/06/30/2008-web-enrollment-and-version-3-templates.aspx or http://support.microsoft.com/kb/2015796). Martin
March 24th, 2010 11:05am

Hi, It is true that we need to select the "Supply in the request" option in order for the certificate template to be visible in the web enrollment page. We don't need to select the option for the User and Basic EFS certificate templates because they are User type certificate templates. Thanks.This posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
March 29th, 2010 9:38am

I have worked on the similar issue with one customer. The issue was caused due of the following: 1) in certificate template Subject tab wasn't switched to Supply in request. 2) certificate template was configured for validity greather than one year. When we configured *both* values, certificate template appears in EWP (Enrollment Web Pages). http://www.sysadmins.lv
March 29th, 2010 6:28pm

Is this a version 2 or version 3 template? Version 3 templates are not supported by Web Enrollment Pages (see for example http://blogs.technet.com/ad/archive/2008/06/30/2008-web-enrollment-and-version-3-templates.aspx or http://support.microsoft.com/kb/2015796 ). Martin Since our CA servers are Windows 2003 I will say with 97% confidence, lol that they are version 2 templates.
Free Windows Admin Tool Kit Click here and download it now
March 29th, 2010 7:01pm

Try to do the following: 1) Duplicate Web Server tamplate; 2) In Template Display name type 'Web Server V2' 3) Make sure if template common name is 'WebServerV2' (this name is automatically generated if you type display name as specified). 4) add this template to issue on your issuing CA. 5) connect to enrollment web pages and check if duplicated template appears. http://www.sysadmins.lv
March 29th, 2010 7:43pm

Since our CA servers are Windows 2003 I will say with 97% confidence, lol that they are version 2 templates. Sorry I just skimmed your question and saw a 2008 Server, by mistake I thought you use 2008 server for CA as well. My bad.
Free Windows Admin Tool Kit Click here and download it now
March 30th, 2010 11:23am

Hello, I Think the Problem ist quite simple. Looks like a Bug in the Installa Wizard. Your newly Created User (SBSAdmin) has no Rights for the Template! Solution: 1. Activate the regular Administrator 2. Do the Request with the regular Administrator OR 1. Open MMC 2. Load Certificate Service Snapin 3. Go to Properties auf the WEBSERVER Template 4. Give the New User Rights to the WEBSERVER Template 5. Do the Procedure again / Reload the Page. 6. The Webserver Template should show up Greetings Ritchy
June 3rd, 2011 12:57pm

I'm using my MS PKI for my native mode sccm deployment and ran into an issue with when setting up the certificates as per the following doc.: http://technet.microsoft.com/en-us/library/cc707697(d=printer).aspx I noticed that the my Certificate Templates ConfigMgrWebServerCertificate and ConfigMgrClientCertificate were not showing up on the enrollment web page. Based on the answers above, I was able to figure out what was needed. I needed to select the "Supply in the request" option. In addition, I needed to give Domain Admins (or whatever group you need) the Enroll Permission. After doing these steps, I had to unpublish the template and then republish it. Hope this is helpful.
Free Windows Admin Tool Kit Click here and download it now
September 19th, 2011 6:19pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics