Link to home
Start Free TrialLog in
Avatar of CorinneSpears
CorinneSpearsFlag for United States of America

asked on

Certificate templates not found

I've installed a new enterprise CA. I published a few computer and user certificates. If I open the certificate mmc as the computer, I can see the computer certificates I've published. If I open it as current user, I can see the user certificate. However, if I go to the web interface, https://isolacerts/certsrv/en-us/, I get a message the No certificate templates could be found. How do I make the certificate templates available from the web?
Avatar of CorinneSpears
CorinneSpears
Flag of United States of America image

ASKER

User generated imageCertificate MMC on the left and web on the right
You need to run the iexplore process as an Administrator
I get the same error when running IE as an administrator.
Avatar of btan
btan

The error typically comes from enrollment though
 http://technet.microsoft.com/en-us/library/cc758774(v=ws.10).aspx#BKMK_10

Rightfully, you shd be able to see the cert from internet option which can browse the available certificate. I guess you cannot see it but do check out, can try importing the certificate too from there too
In Internet Explorer Security Settings I also needed to enable 'Initialize and script ActiveX controls not marked as safe for scripting
I have set the IE security settings and removed all authentication from the site and still get the no templates error.
Quite doubtful with the url access string you entered. Check out this
 http://support.microsoft.com/kb/811418

There is a more detailed checks using mmc, if you are interested or already know.
 http://blogs.technet.com/b/askds/archive/2007/11/06/how-to-troubleshoot-certificate-enrollment-in-the-mmc-certificate-snap-in.aspx
I created a template, gave Everyone read and enroll permissions, and published the template.

I brought in a machine that was not on the domain, and I browsed to our CA URL, https://scdwas03.global.group.local/certsrv/en-us/

I was able to get into the site without a password prompt, so I know NTLM is off and anonymous access is on. I still get the no templates message.

I think there's something wrong with my IIS site's configuration. Because when I click on Home, I get this error.

Server Error
500 - Internal server error.
There is a problem with the resource you are looking for, and it cannot be displayed.

Does anyone know, or have a link to where I can find, the correct settings for an IIS 7 site for certificate enrollments?
BTW: when I click home, it tries to take me to https://scdwas03.global.group.local/certsrv/ which is where I get the 500 error.
ASKER CERTIFIED SOLUTION
Avatar of btan
btan

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I believe IIS was misconfigured when I tried to initially install the web enrollment service.