Certificate Template problem

  • Thread starter Thread starter Frank
  • Start date Start date
F

Frank

HI ALL
I have a certificate server (w2000/sp4)
it is CA with active directory, when I tried to connect via
web browser to enroll the certificate I get the error "No
Certificate Template Could not be found". I did check out
the article from MS site KB811418 and verify DnsHostName
attributed in AD match exactly with the sServerConfig in
CertDat.inc file. The only thing is the case name of my
computer is uppper case like SERVER1.mydomain.com but
they all match in DnsHostname and CertDat.inc file, so I
don't think this caused the problem. Does any one know
any where else I can look for this problem?
Thanks
 
Hi Frank

A few things that have resolved this in the past:

1. Check the directory security on the Certsrv web site and virtual
directory. Make sure you're logged into the machine that you're accessing
the page from with an appropriate account.

2. Check to make sure that Group Policy is effectively applied to all DC's
in the environment. Verify that SMB signing is not enabled or if it is,
enable it on client machines also.

3. Check the permission on the templates themselves. The client and the
enterprise CA computer accounts must have the following permissions for the
certificate templates:

- The client computer account has Read and Enroll permissions.
- The enterprise CA computer account has Read permissions.

In a Microsoft Windows 2000-based domain, certificate templates are
configured in the Active Directory Sites and Services tool (Dssite.msc). In
a Microsoft Windows Server 2003-based domain, certificate templates are
configured in the Certificate Templates tool.

4. In once instance, re-installing Certificate Services has resolved this.

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top