Results 1 to 2 of 2

Thread: Duplicate Certificate template

  1. #1
    Join Date
    Mar 2011
    Posts
    1

    Duplicate Certificate template

    I'm deploying NAP and I would like to duplicate a certificate template that is in the certtempl.msc but with commands. I'm using Windows Server 2008 R2.
    Is duplicating a template the same as requesting a new template?
    If yes, these are the commands I have been trying

    In a file csr.inf i typed:

    [NewRequest]
    Subject="CN=dc1,DC=contoso,DC=com"
    Exportable=TRUE
    KeyLength=2048
    MachineKeySet=TRUE
    FriendlyName="Manual Certificate"
    KeySpec=1

    [EnhancedKeyUsageExtension]
    OID=1.3.6.14.1.311.47.1.1

    [Extensions]
    1.3.6.14.1.311.47.1.1="System Health Authentication"

    [RequestAttributes]
    CertificateTemplate="Workstation"

    and then in then i create the new request
    certreq -new csr.inf request.req

    after that I try to submit the request using this command
    certreq -submit -config - -crl -rpc request.req certFileOut.cert

    but i get the following error:
    Certificate not issued (Denied) Denied by Policy Module 0x80094800, The request was for a certificate template that is
    not supported by the Active Directory Certificate Services policy: 1.3.6.1.4.1.311.21.8.1806387.4854250.11684030.1596675
    3.1069840.122.1.30(Workstation Authentication)/Workstation.

    Any idea if my approach is correct and if not what is the right approach?
    Last edited by MRady; 16-03-2011 at 12:21 AM.

  2. #2
    Join Date
    Jan 2007
    Posts
    200

    Re: Duplicate Certificate template

    When you are trying to request for the certificate for OCS , are you using internal 2003 Enterprise CA, you must not use CA's vertsrv site, you must use OCS Management Console. Right-click the server object in the tree and choose the Certificates option which will bring up the OCS Certificate Wizard.

Similar Threads

  1. Replies: 2
    Last Post: 28-01-2012, 03:50 PM
  2. Replies: 1
    Last Post: 25-03-2009, 05:29 PM
  3. Replies: 0
    Last Post: 08-01-2009, 08:27 AM
  4. Creating Site Server Signing Certificate Template
    By purvagarg in forum Windows Security
    Replies: 3
    Last Post: 23-05-2008, 03:24 PM
  5. Replies: 1
    Last Post: 20-05-2008, 09:24 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,713,481,863.54170 seconds with 17 queries