Go Back   TechArena Community > Technical Support > Computer Help > Windows Server > Windows Server Help
Become a Member!
Forgot your username/password?
Tags Active Topics RSS Search Mark Forums Read

Sponsored Links



Certification Authority

Windows Server Help


Reply
 
Thread Tools Search this Thread
  #1  
Old 17-10-2005
timB
 
Posts: n/a
Certification Authority

I am trying to set up CA in a lab enviroment to work with EFS. I am using a
Lab enviroment, which consists of:

A Windows 2003 DC, 2003 Excahnge server, a number of other test servers,
test computers and one Windows 2003 Member server. The member server is
running certificate service as Enterprise root CA.

However the client computers are not getting certificates from the CA (only
the self signed personal certificates) and I am getting the following error
message when I look on the event viewer within the CA server:

Certificate Services denied request 16 because The requested certificate
template is not supported by this CA. 0x80094800 (-2146875392). The request
was for Domain Name\Computer Name.

Additional information: Denied by Policy Module 0x80094800, The request was
for a certificate template that is not supported by the Certificate Services
policy:
DomainController.

Any help would be greatly appriciated.

Reply With Quote
  #2  
Old 17-10-2005
Miha Pihler [MVP]
 
Posts: n/a
Re: Certification Authority

Hi Tim

Does this help?

A Certificate Request That Uses a New Template Is Unsuccessful
http://support.microsoft.com/default.aspx?id=281260

--
Mike
Microsoft MVP - Windows Security


"timB" <timB@discussions.microsoft.com> wrote in message
news:489E3989-B07C-4EE1-9DC1-A89654743F6D@microsoft.com...
>I am trying to set up CA in a lab enviroment to work with EFS. I am using
>a
> Lab enviroment, which consists of:
>
> A Windows 2003 DC, 2003 Excahnge server, a number of other test servers,
> test computers and one Windows 2003 Member server. The member server is
> running certificate service as Enterprise root CA.
>
> However the client computers are not getting certificates from the CA
> (only
> the self signed personal certificates) and I am getting the following
> error
> message when I look on the event viewer within the CA server:
>
> Certificate Services denied request 16 because The requested certificate
> template is not supported by this CA. 0x80094800 (-2146875392). The
> request
> was for Domain Name\Computer Name.
>
> Additional information: Denied by Policy Module 0x80094800, The request
> was
> for a certificate template that is not supported by the Certificate
> Services
> policy:
> DomainController.
>
> Any help would be greatly appriciated.



Reply With Quote
  #3  
Old 17-10-2005
Miha Pihler [MVP]
 
Posts: n/a
Re: Certification Authority

Hi Tim

Does this help?

A Certificate Request That Uses a New Template Is Unsuccessful
http://support.microsoft.com/default.aspx?id=281260

--
Mike
Microsoft MVP - Windows Security


"timB" <timB@discussions.microsoft.com> wrote in message
news:489E3989-B07C-4EE1-9DC1-A89654743F6D@microsoft.com...
>I am trying to set up CA in a lab enviroment to work with EFS. I am using
>a
> Lab enviroment, which consists of:
>
> A Windows 2003 DC, 2003 Excahnge server, a number of other test servers,
> test computers and one Windows 2003 Member server. The member server is
> running certificate service as Enterprise root CA.
>
> However the client computers are not getting certificates from the CA
> (only
> the self signed personal certificates) and I am getting the following
> error
> message when I look on the event viewer within the CA server:
>
> Certificate Services denied request 16 because The requested certificate
> template is not supported by this CA. 0x80094800 (-2146875392). The
> request
> was for Domain Name\Computer Name.
>
> Additional information: Denied by Policy Module 0x80094800, The request
> was
> for a certificate template that is not supported by the Certificate
> Services
> policy:
> DomainController.
>
> Any help would be greatly appriciated.



Reply With Quote
  #4  
Old 17-10-2005
Miha Pihler [MVP]
 
Posts: n/a
Re: Certification Authority

Hi Tim

Does this help?

A Certificate Request That Uses a New Template Is Unsuccessful
http://support.microsoft.com/default.aspx?id=281260

--
Mike
Microsoft MVP - Windows Security


"timB" <timB@discussions.microsoft.com> wrote in message
news:489E3989-B07C-4EE1-9DC1-A89654743F6D@microsoft.com...
>I am trying to set up CA in a lab enviroment to work with EFS. I am using
>a
> Lab enviroment, which consists of:
>
> A Windows 2003 DC, 2003 Excahnge server, a number of other test servers,
> test computers and one Windows 2003 Member server. The member server is
> running certificate service as Enterprise root CA.
>
> However the client computers are not getting certificates from the CA
> (only
> the self signed personal certificates) and I am getting the following
> error
> message when I look on the event viewer within the CA server:
>
> Certificate Services denied request 16 because The requested certificate
> template is not supported by this CA. 0x80094800 (-2146875392). The
> request
> was for Domain Name\Computer Name.
>
> Additional information: Denied by Policy Module 0x80094800, The request
> was
> for a certificate template that is not supported by the Certificate
> Services
> policy:
> DomainController.
>
> Any help would be greatly appriciated.



Reply With Quote
  #5  
Old 18-10-2005
timB
 
Posts: n/a
Re: Certification Authority

Thanks for your help, but that did not fix this issue. Some further
information:

When I try to request a new certificate through IE and I go to 'Request
Certificate' I receive the following error message on the page:

"No certificate template could be found. You do not have permission to
request a certificate from this CA, or an error occured while accessing
Active Directory"


"Miha Pihler [MVP]" wrote:

> Hi Tim
>
> Does this help?
>
> A Certificate Request That Uses a New Template Is Unsuccessful
> http://support.microsoft.com/default.aspx?id=281260
>
> --
> Mike
> Microsoft MVP - Windows Security
>
>
> "timB" <timB@discussions.microsoft.com> wrote in message
> news:489E3989-B07C-4EE1-9DC1-A89654743F6D@microsoft.com...
> >I am trying to set up CA in a lab enviroment to work with EFS. I am using
> >a
> > Lab enviroment, which consists of:
> >
> > A Windows 2003 DC, 2003 Excahnge server, a number of other test servers,
> > test computers and one Windows 2003 Member server. The member server is
> > running certificate service as Enterprise root CA.
> >
> > However the client computers are not getting certificates from the CA
> > (only
> > the self signed personal certificates) and I am getting the following
> > error
> > message when I look on the event viewer within the CA server:
> >
> > Certificate Services denied request 16 because The requested certificate
> > template is not supported by this CA. 0x80094800 (-2146875392). The
> > request
> > was for Domain Name\Computer Name.
> >
> > Additional information: Denied by Policy Module 0x80094800, The request
> > was
> > for a certificate template that is not supported by the Certificate
> > Services
> > policy:
> > DomainController.
> >
> > Any help would be greatly appriciated.

>
>
>

Reply With Quote
  #6  
Old 18-10-2005
timB
 
Posts: n/a
RE: Certification Authority

Also, when I request a new certificate from the Certificates snap in -
Current User (Personal Certificates) I receive the following error message:

The wizard cannot be started because one of the following conditions:
- There are no trusted certification authorities (CAs) avaliable.
- You do not have the permissions to request certificates from the avalable
CAs.
- The available CAs issue certificates for which you do not have permission
Reply With Quote
  #7  
Old 28-10-2005
Miha Pihler [MVP]
 
Posts: n/a
Re: Certification Authority

Hi,

What template are you trying to request?

--
Mike
Microsoft MVP - Windows Security

"timB" <timB@discussions.microsoft.com> wrote in message
news:6B1F9002-A103-4A90-94F3-C299BECF2E00@microsoft.com...
> Thanks for your help, but that did not fix this issue. Some further
> information:
>
> When I try to request a new certificate through IE and I go to 'Request
> Certificate' I receive the following error message on the page:
>
> "No certificate template could be found. You do not have permission to
> request a certificate from this CA, or an error occured while accessing
> Active Directory"
>
>
> "Miha Pihler [MVP]" wrote:
>
>> Hi Tim
>>
>> Does this help?
>>
>> A Certificate Request That Uses a New Template Is Unsuccessful
>> http://support.microsoft.com/default.aspx?id=281260
>>
>> --
>> Mike
>> Microsoft MVP - Windows Security
>>
>>
>> "timB" <timB@discussions.microsoft.com> wrote in message
>> news:489E3989-B07C-4EE1-9DC1-A89654743F6D@microsoft.com...
>> >I am trying to set up CA in a lab enviroment to work with EFS. I am
>> >using
>> >a
>> > Lab enviroment, which consists of:
>> >
>> > A Windows 2003 DC, 2003 Excahnge server, a number of other test
>> > servers,
>> > test computers and one Windows 2003 Member server. The member server is
>> > running certificate service as Enterprise root CA.
>> >
>> > However the client computers are not getting certificates from the CA
>> > (only
>> > the self signed personal certificates) and I am getting the following
>> > error
>> > message when I look on the event viewer within the CA server:
>> >
>> > Certificate Services denied request 16 because The requested
>> > certificate
>> > template is not supported by this CA. 0x80094800 (-2146875392). The
>> > request
>> > was for Domain Name\Computer Name.
>> >
>> > Additional information: Denied by Policy Module 0x80094800, The
>> > request
>> > was
>> > for a certificate template that is not supported by the Certificate
>> > Services
>> > policy:
>> > DomainController.
>> >
>> > Any help would be greatly appriciated.

>>
>>
>>



Reply With Quote
  #8  
Old 28-10-2005
timB
 
Posts: n/a
Re: Certification Authority

Hi,

I have managed to resolve this issue, there was an issue with the domain.

Thanks Again,

Tim

"Miha Pihler [MVP]" wrote:

> Hi,
>
> What template are you trying to request?
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "timB" <timB@discussions.microsoft.com> wrote in message
> news:6B1F9002-A103-4A90-94F3-C299BECF2E00@microsoft.com...
> > Thanks for your help, but that did not fix this issue. Some further
> > information:
> >
> > When I try to request a new certificate through IE and I go to 'Request
> > Certificate' I receive the following error message on the page:
> >
> > "No certificate template could be found. You do not have permission to
> > request a certificate from this CA, or an error occured while accessing
> > Active Directory"
> >
> >
> > "Miha Pihler [MVP]" wrote:
> >
> >> Hi Tim
> >>
> >> Does this help?
> >>
> >> A Certificate Request That Uses a New Template Is Unsuccessful
> >> http://support.microsoft.com/default.aspx?id=281260
> >>
> >> --
> >> Mike
> >> Microsoft MVP - Windows Security
> >>
> >>
> >> "timB" <timB@discussions.microsoft.com> wrote in message
> >> news:489E3989-B07C-4EE1-9DC1-A89654743F6D@microsoft.com...
> >> >I am trying to set up CA in a lab enviroment to work with EFS. I am
> >> >using
> >> >a
> >> > Lab enviroment, which consists of:
> >> >
> >> > A Windows 2003 DC, 2003 Excahnge server, a number of other test
> >> > servers,
> >> > test computers and one Windows 2003 Member server. The member server is
> >> > running certificate service as Enterprise root CA.
> >> >
> >> > However the client computers are not getting certificates from the CA
> >> > (only
> >> > the self signed personal certificates) and I am getting the following
> >> > error
> >> > message when I look on the event viewer within the CA server:
> >> >
> >> > Certificate Services denied request 16 because The requested
> >> > certificate
> >> > template is not supported by this CA. 0x80094800 (-2146875392). The
> >> > request
> >> > was for Domain Name\Computer Name.
> >> >
> >> > Additional information: Denied by Policy Module 0x80094800, The
> >> > request
> >> > was
> >> > for a certificate template that is not supported by the Certificate
> >> > Services
> >> > policy:
> >> > DomainController.
> >> >
> >> > Any help would be greatly appriciated.
> >>
> >>
> >>

>
>
>

Reply With Quote
  #9  
Old 14-09-2007
Member
 
Join Date: Sep 2007
Posts: 1
CA Template permissions

I know this is an old thread, but I'm having this exact same issue in a very similar environment and not having much luck resolving it elsewhere. What was the issue on your domain that you corrected to resolve this, please?

Thank you.
Reply With Quote
Reply

  TechArena Community > Technical Support > Computer Help > Windows Server > Windows Server Help
Tags: ,



Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads for: "Certification Authority"
Thread Thread Starter Forum Replies Last Post
Which apple certification is right for you? Training and Certification alienlife Education Career and Job Discussions 1 21-04-2011 12:24 PM
Multiple copies of LocalService.NT AUTHORITY and NetworkService.NT AUTHORITY in My documents Bearing Operating Systems 4 07-04-2011 10:16 AM
NT AUTHORITY SYSTEM Pax Thien Windows Security 4 07-10-2009 08:43 PM
CISA Certification is the best Professional Certification Program Career-Minded Education Career and Job Discussions 4 24-04-2009 11:55 PM
Enterprise Root Certification Authority not trusted Donald Windows Security 3 20-02-2006 03:54 PM


All times are GMT +5.5. The time now is 08:58 PM.