asked on

Certificate Services Cert Template missing from Web Interface

In my Windows 2012 R2 cluster I just copied the "Computer" template and in the new one set it so the user can input all data. Domain Admin has rull rights to the template. All DC's are in one site yet when I log into the web interface https://servername/certsrv the template is not listed? Yet if I go to the GUI an manually request the cert via the wizard it fail stating it is not in AD this may be from the fact i had the option to publish to AD select?

Why isn't the template showing up in the web interface?

Lofty Worm

I am a bit confused as to your process and naming. Can you be a bit more specific? Is the cluster the cert server?

compdigit44

ASKER

Here is my issue.. I have DMZ server which I need to mange via SCCM and need to get a computer cert on them. Since they do not have direct access to the internal CA server I created a new computer template that allows the user to type in all information for this request. I am logged in with my Domain Admin account and the Domain Admin group has the right to enroll for the cert yet I do not see if on t he drop down with access the site https://servername/certsrv to request the cert..

compdigit44

ASKER

An y thoughts I why the cert is not not listed as being able to publish? Is this because it is marked for the user to import information in the request?

Lofty Worm

I have been thinking about it, and will need to give it some more thought and research.
My knee jerk reaction is that the CA (Servername) does not see it, but I will see what I can find....

ASKER CERTIFIED SOLUTION

Lofty Worm

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

compdigit44

ASKER

I tried all suggestion and nothing is working. I even tried to create a exact clone of the computer template restart service etc and it will not show up yet when you go to certmgt.msc -> and request a cert you can select the template... Now about a month ago I did migrate my CA from Widnows 2008 to 2012 and this is the first new template that I created

compdigit44

ASKER

I found I was able to get the template to be listed as published by doing it via command line as outline in the following article:

https://social.technet.microsoft.com/Forums/windowsserver/en-US/8e7404d5-801e-4ba1-8fbf-709858c91ea4/ca-missing-templates-in-enable-certificate-templates?forum=winserversecurity

Does Windows 2012 have a issue publishing version 1 & 2 templates via the GUI?

Lofty Worm

I can't say, but it seems it does. I hope I was helpful, if not giving the direct answer. Good to know it works!