Solved

Certificate auto-enrollment has not been enabled.

Posted on 2014-10-21
4
563 Views
Last Modified: 2014-11-06
I was in the process of demoting and decommissioning an old 2003 Domain Controller when I determined is was the certificate authority for this domain.  This network has two 2008 R2 DC's functioning so I decided to move that role to one of those servers.

I followed the migration procedures detailed in this TechNet article and all seemed to be fine until I tried to verify the migration by launching the certmgr and requesting to  automatically enroll and retrieve certificates.

http://technet.microsoft.com/en-us/library/ee126140(v=ws.10).aspx

The results seem to indicate Certificate Auto-Enrollment has not been enabled.

When I select the option to Show All Templates, all options are greyed out - status:  Unavailable.  Did I miss something?

Any thoughts would be greatly appreciated.  Thank you
0
Comment
Question by:LenCepeda
  • 2
  • 2
4 Comments
 
LVL 9

Expert Comment

by:RantCan
ID: 40395551
Have you verified the services are started?
0
 

Author Comment

by:LenCepeda
ID: 40395702
Yes, I verified the AD Certificate Services are running.
0
 
LVL 9

Accepted Solution

by:
RantCan earned 500 total points
ID: 40395907
Can you upload the C:\windows\certocm.log file?
0
 

Author Closing Comment

by:LenCepeda
ID: 40427005
I believe I needed to wait for the changes to take effect.  I rebooted the server waited a few hours and all was in order
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question