Re: add UPN in certificate Request

Michael,
As a start, try applying the following setting to enable scripted
submission of a subject alternative name (SAN). It's supposed to only
be necessary on a Win2K CA, but I found that I needed it on a Win2K3
CA.

"CERTUTIL -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2"

If you then run "CERTUTIL -getreg policy" you should see the change
has been made.

I'm assuming that you are using an inf file and have a
[RequestAttributes] section where you are specifying a SAN.

Finally, if this still doesn't work, try changing the RequestType to
CMC.

Hope this helps, Dave

.