Re: Certificate Tamplates in CertSrv Website

From: SKrueger (info_at_kr-network.de)
Date: 09/08/03 

Date: Mon, 8 Sep 2003 16:41:19 +0200

Hallo,

thanks for the answer! But even if it is a Certificate tamplate zo issue and
if I have the right to enroll not all certificates are shown in the web
enrollment page.

My question is what es is needed to enroll a certificate over the website.
One clear example ist the IPSec online and offline certificate tamplate. Wy
is the offline shown in the web enrollment but the standard IPsec tamplate
not. There must be something else.

S. Krüger
"Shawn Rabourn (MS)" <shawnrab@online.microsoft.com> schrieb im Newsbeitrag
news:ujqs6qgdDHA.2356@TK2MSFTNGP09.phx.gbl...
> For certificate templates to show up in the web enrollment pages, it needs
> to have the proper enroll ACE on the template as well as it needs to be in
> the policy module as a template to issue.
>
> Go into the Certificate Authority Snapin, go to Certificate Templates and
> right click on the container and go to "New+Certificate template to issue"
>
> --Shawn
> This posting is provided "AS IS" with no warranties and confers no rights.
>
>
> "SKrueger" <info@kr-network.de> wrote in message
> news:uYlvSAgdDHA.1044@tk2msftngp13.phx.gbl...
> > Hello,
> >
> > i try to understand on what it depends witch certificate types
(tamplate)
> > are shown in the Certificate server website (CertSrv) under Windows 2003
> > Server. One point is the right to issue a certificate. But the
permission
> on
> > certificate tamplates can not be the only thing, because not all
> > certificates where shown even if i have the permission. primarily
computer
> > certificates are not always shown. Depends it on specific settings in
the
> > certificate tamplate?
> >
> > If someone know more about it please answer!
> >
> > S. Krüger
> >
> >
>
>

Relevant Pages

  • Re: Computer and User Certificates Issues
    ... I have double checked the permissions on each duplicate certificate, ... Authenticated Users = Read ... Domain Computers = Read, Enroll, Autoenroll ... I have checked the Failed Requests folder on the CA and there are no failed ...
    (microsoft.public.security)
  • RE: Autoenrollment error
    ... Certificate Services: Effects of security enhancements to the DCOM protocol) ... Checked if security authenticated users has read and enroll permission. ... AD Users and Computers to verify that the members are Domain Users, ... Microsoft Online Partner Support ...
    (microsoft.public.windows.server.active_directory)
  • Re: Computer and User Certificates Issues
    ... domain computers group has read, enroll, and autoenroll permissions. ... CA use the Management Console for Certificate Authority and look in the ... > The new User Template has Domain Users with Enroll and AutoEnroll Access ...
    (microsoft.public.security)
  • Re: Certificate Renewal / Smart Cards
    ... enroll and autoenroll access to the certificate ... autorenew needs DCOM, ...
    (microsoft.public.windows.server.security)
  • Re: Certificate Renewal minimum requirements
    ... > permissions are granted user always must have enroll permissions too. ... > able to enroll smart card user certificates by themselves. ... The solution is to use two certificate templates. ...
    (microsoft.public.windows.server.security)