KB ID 0001552
Problem
When connected to the Web Enrolment portal (Certsrv) for your Certificate Services, you attempt to submit a certificate request. But you only see User and Basic EFS under Certificate Templates, like so;
Solution
I’ve done this myself many times, usually you are looking for the ‘Web Server‘ template and it’s not there, so we will use that as an example. Go to your CA Server.
Windows Server – Locate CA / Certificate Services
Administrative Tools > Certificate Services > Certificate template’s > Firstly make sure the template you are looking for is actually published! (i.e. is in the right hand window). Assuming it’s published, right click Certificate Templates > Manage.
Locate the template in question, Properties > Security > Grant the USER you are logged in, and attempting to submit the certificate request as, the READ and ENROL rights > Apply > OK.
Restart certificate services.
Allow a little time for Active directory replication, then try again.
Related Articles, References, Credits, or External Links
NA
You’re my new hero!
Awesome Post..This help a lot to me…
thank you
You are the rock. i run into this issue while back but i forgot to enable to enroll. Thank you again for sharing
Thank you, it works!
If you are performing the service stop and start on a sub CA, make sure the root CA is powered on. It is common to leave root CA’s powered down for security reasons and it will need to be on to restart the services on SUB CA’s.
Another commenter said “If you are performing the service stop and start on a sub CA, make sure the root CA is powered on. It is common to leave root CA’s powered down for security reasons and it will need to be on to restart the services on SUB CA’s.”
This is because the subordinate CA can’t read the root CA’s CRL. If your root CA’s crl is published to another server that stays online, and it should be, powering on/connecting to the network the root server should not be required. HTH.
Awesome, helped
you’re my hero too
thank you so much !
Perfect… I’ve got it to appear in the list of Templates without restarting the Certificate Services.
I have tried that and I still cannot get the computer template to appear in the web service. Any ideas? Thanks
You are DA Man – that worked! Thanks