Re: How do i issue certificates based on new templates?

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 12/02/03 

Date: Tue, 2 Dec 2003 05:27:19 -0800

a grey template is a version 1 template or a template you do not have
permissions to modify.

once you create a new template, did you add it to the CA to be used. steps
are in the auto-enrollment whitepaper and help files:

auto-enroll
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/plan/autoenro.asp

Cert templates -
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/deploy/confeat/ws03crtm.asp 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Kaare Langedrag" <kare.langedrag@ergo.no> wrote in message
news:ejznf9MuDHA.556@TK2MSFTNGP11.phx.gbl...
> Hi,
>
> 1) How can i manually issue certificates based on custom certificate
> templates?
>
> 2) What does it mean that a certificate template is grayed out in the
> certificate template snap-in?
>
> The background for my questions is...
>
> If i for example take a copy of the user template, i cannot enroll
> certificates based on this template either with the web enrollment or the
> certificate snap it... Theese enrollment procedures allways seems to use
the
> original (grayed out or not!) templates anyway. Is this right? There are
> wast amounts of information on making templates and setting up PKI in
> general, but i cannot find information anywhere on how certificates based
on
> new templates can be enrolled. The only time I could issue a new template
> was when I copied a templates in order to set the priveleges correctly for
> autoenrollment.
>
>
>
>

Relevant Pages

  • Re: Web Certificate enrollment with Windows 2003 server
    ... Now my new template appears in the list of certificate ... I can web enroll the original certificate of "Enrollment ... >Here all other CSPs except Microsoft are in Gray color ...
    (microsoft.public.win2000.security)
  • RE: Certsrv and Autoenrollment problem
    ... Thank you for posting to the SBS Newsgroup. ... so it will not be instantiated on the template ... Certificate Authority snap-in will show the templates in the Certificate ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Problems requesting computer certificates on an issuing CA
    ... The exact permissions on my template are: ... I tried to manually enroll for a computer certificate based on ... CA allows the computers to request certificates. ...
    (microsoft.public.windows.server.security)
  • Microsoft PKI: problem with autoenrollment for domain controllers
    ... I have the following problem on my AD-Domain (3 Domain Controllers ... "Automatic Certificate Enrollment for local system could not find a ... the group policy automatic enrollment object. ... The "DomainController" template is the standard template, ...
    (microsoft.public.windows.server.security)
  • Re: Web Certificate enrollment with Windows 2003 server
    ... I manage to duplicate my enrollment Agent certificate and ... Services" in the list of certificate template but ... >Here all other CSPs except Microsoft are in Gray color ... >>The MMC enrollment enumerates the CSPs on the client ...
    (microsoft.public.win2000.security)
Quantcast