Re: PKI: Issue Computer Certificate

Patrik Nagel wrote:
Brian, it seems that the CSP in the template is the problem. In addition to the "Microsoft RSA SChannel Cryptographic Provider", I've selected the "Microsoft Base Cryptographic Provider 1.0" (as a test). This change makes the Template available on the IAS-Server by using the MMC!

Sorry for this false statement. In addition to the CSP, I've also added the global Group "Domain Computers" to the ACL with read and enroll permissions. It seems that this change made the difference and not the CSP. I can now install the certificate on the IAS-server with the "RSA SChannel CSP".
I don't know why it didn't work with the "RAS and IAS Servers" group (local domain scope). I added the computer-account to this group, but that doesn't seem to work.

anyway, it works now!
Patrik
.