"No Certificate Templates Could Be Found" Error Message When User Requests Certificate from CA Web Enrollment Pages

I am having some problem with users (even other domain admins)
requesting certificates. I am sending them to the certificate server
webpage, and when they click on the link Create and submit a request to
this CA, they get the following error message:

"No certificate templates could be found. You do not have permission to
request a certificate from this CA, or an error occurred while
accessing the Active Directory."

I (an enterprise admin) can authenticate and request a certificate, but
I verified the error message occurs with other domain admins like I
said. I checked the KB article
(http://support.microsoft.com/?id=811418) that deals with this error,
and did not see any difference (case or otherwise) between the two
strings (dNSHostName attribute and the the value for sServerConfig). I
nevertheless copied and pasted the value to the other server. The same
error still occured when the user shutdown and restarted IE.

Any other suggestions?

Kent A

.

Relevant Pages

  • Re: Computer and User Certificates Issues
    ... Enrollment of User Certificates using the custom v2 User Certificate Template ... I can NOT request the custom v2 Computer Cert nor the included v1 no ... Concerning permissions, these are the exact permissions I am using now: ...
    (microsoft.public.security)
  • Re: Cannot request computer certificate.
    ... request a computer certificate for about 9 months. ... and verify that you can get a computer/server certificate from it. ... List of NetBt transports currently bound to the Redir ... DNS Host Name: srvr3.domain.com ...
    (microsoft.public.windows.server.security)
  • RE: SIMple SSL question ??
    ... OK - i would also delete a cert request file lying around. ... But a certificate is a pub key + extra info. ... That said - if someone compromises the server he will also find a way to retrieve the private key. ... traffic between the initial web server and the client. ...
    (microsoft.public.dotnet.security)
  • Re: how can we restrict what certificate WSE will use?
    ... the valid x509 certificate which is used to identify him'. ... X509SecurityTokenManager to verify the request is from a trusted client. ... the problem is that he can not passed the authentication (suppose we ... > decrypte and signature validation process. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Web Certificate Enrollment security problem
    ... Enrollment works only with the NetBIOS Name and not with the FQDN. ... Svyatoslav Pidgorny, MS MVP - Security, MCSE ... access auditing and logging "issue and manage certificate requests" on ... Have seen that there is a component "Certsrv Request" when launching ...
    (microsoft.public.security)