1) Is your CA server running on an Enterprise Edition OS? If so, it was installed as such, not upgraded from Standard Edition, correct? It must be Enterprise edition OS to see templates.
2) Is your CA installed as an Enterprise CA (root or subordinate)? You can double check by looking at the file certdat.inc located in %systemroot%\system32\cert
sServerType="Enterprise" 'vs StandAlone
If it has this then it is standalone:
sServerType="StandAlone" 'vs Enterprise
It must be Enterprise CA to see templates.
3) Can you access certtmpl.msc (Certificate Templates.msc) okay? If so, open a template and check the permissions tab to make sure you have permissions to read and enroll. Note that some machine certs may not allow you to enroll via certsrv this way - if you aren't sure pick a user template like an email one (not CA Exchange which has nothing to do with exchange)
4) Try running this to reset the certsrv web directory:
certsrv -vroot
net stop certsvc
net start certsvc
5) Make sure you aren't blocking activex.
6) Read this and install the hotfix for certsrv to work correctly with vista/2008:
http://support.microsoft.c
7) Make sure your AD functional level is at least 2000 native mode to support version 1 templates, preferably 2003 or higher to support version 2 templates..
Main Topics
Browse All Topics





by: amitg26Posted on 2009-07-20 at 08:27:27ID: 24896011
Please make sure that you have the template for the kind of certificate you want to use. om/kb/2812 71
and also check the microsoft article
Certification Authority configuration to publish certificates in Active Directory of trusted domain
http://support.microsoft.c