Smart card enrollment issues

[NGV BalaKrishna]

There are some smart cards which I am trying to enroll with the below setup:

• The reader is Gemalto PC Twin USB (Old Name = Gempc twin usb)
• The card is Gemalto Classic TPC IS White PVC (Old name = GemSafeXpresso
• 32K)
• Windows 2008 Enterprise Root CA
• Enrollment station is Vista SP1

I am truing to use these cards for remote access via TSGateway. The issue that I am facing is that if I create another certificate template by duplicating the smart card logon template then same template is not available from the enrollment station. I have tried to modify the issuance requirements but it doesnt seems to work. Can anyone please help with this issue?

[JUSTICE]

This problem occurs if the following conditions are true:

1. The certificate template has been configured to use the CA certificate manager approval option on the Issuance Requirements tab of the template properties dialog box.
2. The certificate template has not been set to require exactly one signature of an authorized certificate request agent. The smart card enrollment station ignores any templates that do not require exactly one authorized signature.

To solve this issue, go to this website - http://support.microsoft.com/kb/313629

[HELLIAN]

The process required to configure smart card logon in Windows is broken down into four basic tasks:

1. Configuring the Certificate Authority (CA) to issue the proper certificates.
2. Specifying the policy that dictates which users can enroll for those certificates.
3. Configuring the enrollment agent account.
4. Enrolling users for smart cards.

For more information, go to this website: http://support.microsoft.com/kb/257480

[lvandenb]

I just added "Certificate Request Agent" for Issuance Requirements , for 1 authorized signature: Application Policy

I think this was it . Can anybody confirm ?