Subordinate CA Certificate Requests
I have an enterprise and subordinate CA on my network. Both are installed on Win 2008 R2. The Enterprise CA is offline for best practice security reasons. When I submit a CSR to my subordinate CA I keep getting the following error " No certificate templates could be found. You do not have permission to request a certificate from this CA, or an error occured while accessing AD".
Is this an R2 issue that I'm going to have to live with ?
Is this an R2 issue that I'm going to have to live with ?
ASKER
I"ve seen this article before and I've already checked the dNSHost name attributes they are identical. Can a subordinate CA issue CSR's or does it have to be done through an MMC. The enterprise CA works perfectly " If I turn it on " but for best practice security reasons I choose not to.
Any other ideas ?
Any other ideas ?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I tested this in my lab enviornment and it worked to resolve my issue
KB Article http://support.microsoft.com/default.aspx?scid=kb;EN-US;811418
Possibly Template Settings in Active Directory was incorrect.
remove and add the configured Template from the CA Snap
CA Console,
Certificate Template -> Select and Deleted the Template
-> right click on "Certificate Template" -> New -> "Certificate Template to Issue". added back the configured template.