asked on

Certificate Template shows number and no name

On a Windows Server 2008 R2 Enterprise Certificate Authority, I am able to get User Certificates to start Auto Enrolling by making Copies of the User Certificate in Certificate Templates. I made one called "UserCert2003" and one called "UserCert2008" according to their minimum Server CA (We have XP and 7 machines). I then created the represented Templates in the Certification Authority tool.

User certificates started to auto-enroll like expected, but the Certificate Template column only shows the dotted number and no name like other items do.

Attached is what I see in the issued, I have blocked out Requester name to protect the innocent.

Boilermaker85

When you copied the user Template, on the properties, did you specify a new Template Display name on the General Tab? You should still be able to edit those properties.

Chris Clos

ASKER

Yes. It has the names "UserCert2003" and "UserCert2008" respectively.
User2003-Cert-General-Tab.PNG
User2008-Cert-General-Tab.PNG

Boilermaker85

Do you have "Certificate TEmplate Name" in the Extensions Tab inclusions?

Chris Clos

ASKER

It appears to have it in the Template Display name.
User2003-Cert-Extension-Detail.PNG
User2008-Cert-Extension-Detail.PNG

ASKER CERTIFIED SOLUTION

Chris Clos

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Boilermaker85

Thanks. I never would have figured out that you were on Core Edition. Glad you stopped me from investigating further.

Chris Clos

ASKER

Answered in my previous comment

klojewski

Make sure that the account that is requesting the cert has Read permissions on the certificate template.

In my case, I saw the exact same issue. The account used to request the certificate had Enroll permissions, but not Read. Hence the cert was issued perfectly, but the template name was missing in the certificate details of the issued cert.

After giving Read permissions, all is ok.