Autoenrollment Fails



We had a bogus machine certificate get created in the attempt to
deploy machine certificates on our domain. We removed the certificate
off the CA server, removed the template from Sites and Services in AD,
and got rid of the group policy object we were trying to use to push
it out. Now, machines are reporting this error:

Automatic certificate enrollment for local system could not find a
valid certificate template to match Machine
CNF:da67530c-aac0-9171-af1b-092b3a298830 as specified in the group
policy automatic enrollment object. Enrollment will not be performed.

Autoenrollment Event ID: 6

Where could this be coming from? Where can I modify this automatic
enrollment object to remove it? The template it is talking about:
Mahcine CNF da67...etc is the certificate we moved....I don't nkow how
it got that name, but that is what showed in the tamplates in AD Sites
and Services

.



Relevant Pages

  • Re: 802.1X/EAP authentication issue with XP client
    ... The current machine certificate was installed using the Request New ... Re file permissions... ... cert was manually moved in the cert store, ...
    (microsoft.public.internet.radius)
  • Re: 802.1X/EAP authentication issue with XP client
    ... The current machine certificate was installed using the Request New ... Re file permissions... ... We have agreement that the problem is one of two things -- either the cert ...
    (microsoft.public.internet.radius)
  • Re: Machine Certificates for L2TP/IPSEC
    ... You can't really associate a machine certificate with a user. ... > I have set up a test lab with 3 computers and one Server. ... > installed on both the client PC and the VPN Server. ...
    (microsoft.public.win2000.security)
  • Using machine cert for 2nd factor VPN authentication as a normal u
    ... We want to use the machine certificate as the second factor for VPN ... authentication with our Anira solution, but are having a problem with the ... NTFS permissions of the certificate. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Certsrv and Autoenrollment problem
    ... Thank you for posting to the SBS Newsgroup. ... so it will not be instantiated on the template ... Certificate Authority snap-in will show the templates in the Certificate ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)