Problems setting up automatic certificate requests

From: Andy Dent (AndyDent_at_discussions.microsoft.com)
Date: 07/25/05


Date: Mon, 25 Jul 2005 08:39:07 -0700

OK I know I am doing something stupid here.
I have a Windows 2003 Domain Controller running SP1 that has just been made
an EnterpriseRoot CA.

I am following the technet articles on setting up Radius Authentication for
Wireless. When I come to setting up automatc certificate requests I open up
Group Policy and add a new Automatic Certificate Request for a computer. The
certificate template however is empty.

The Certificate server is functioning as it is providing Domain Controller
Certs, User Certs etc.

I've checked Group Membership of the Cert Publishers Group. I've added the
certificate into the Trusted Root Certification Authorities.

If I try to add a computer certificate through the certificates snap in I
get and error.
The wizard cannot be started because
1)There are no trusted Certification Authorities
2)You do not have permissions to request certificates
3) The available CA/s issue certificates for which you do not have permission.

I'm stuck.
What next?



Relevant Pages

  • Re: Event ID 13 - automatic certificate enrollment error
    ... add Domain Controllers to it and check enroll ... > MMC for the certificate authority I can see the certificate templates ... > folder and when I select it I can then see Domain Controller on the ... > manage I can see the template Domain Controller. ...
    (microsoft.public.windows.server.active_directory)
  • Autoenrollment Failure (0x80070005) - Additional help reqd.
    ... apply the fix recommended. ... One of the DCs is also a Certificate Server. ... >> has successfully obtained a 'Domain Controller' certificate. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Autoenrollment Failure (0x80070005) - Additional help reqd.
    ... reboot the server right now, I have to wait till 8 hours are passed by. ... > apply the fix recommended. ... > One of the DCs is also a Certificate Server. ... >>> I have an Enterprise Root CA, which resides on the first domain controller ...
    (microsoft.public.windows.server.active_directory)
  • Re: Microsoft PKI: problem with autoenrollment for domain controllers
    ... Microsoft CAs are hard coded to request the Domain Controller certificate. ... WIndows SErver 2003 introduced the Domain Controller AUthentication certificate template, ...
    (microsoft.public.windows.server.security)
  • Re: Autoenrollment of Certificates
    ... This newsgroup only focuses on SBS technical issues. ... Did you install CA on the SBS Server? ... | events which led up to the point where a new certificate was created ...
    (microsoft.public.windows.server.sbs)