Certificate Authority Error
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Certificate Authority Error

 
Post new topic   Reply to topic    Windows Server Forum Index -> Security
Author Message
Jeff
Guest
Posted: Thu Jan 13, 2005 12:10 am    Post subject: Certificate Authority Error Reply with quote
We are trying to generate a new certifiacte request on a Win2003 Enterprise
Root CA. We get the following error:

The request contains no certificate template information 0x80094801
(-2146875391)
Denied by Policy Module 0x80094801, the request does not contain a
certificate template extension or Certificate template request attribute.

has anyone seen this error before? What are we doing wrong? How can we
troubleshoot this?

Thanks,

Jeff
Back to top
Shreeniwas Kelkar [MSFT]
Guest
Posted: Thu Jan 13, 2005 2:57 am    Post subject: Re: Certificate Authority Error Reply with quote
Can you describe your scenario in more detail? How was the certificate
request generated? How is it being submitted to the root CA? Is the root CA
online or offline?

--
Shreeniwas Kelkar [MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights.


"Jeff" <jeffpoling@yahoo.com> wrote in message
news:OLheSIN%23EHA.2452@TK2MSFTNGP14.phx.gbl...
Quote:
We are trying to generate a new certifiacte request on a Win2003
Enterprise Root CA. We get the following error:

The request contains no certificate template information 0x80094801
(-2146875391)
Denied by Policy Module 0x80094801, the request does not contain a
certificate template extension or Certificate template request attribute.

has anyone seen this error before? What are we doing wrong? How can we
troubleshoot this?

Thanks,

Jeff
Back to top
Brian Komar
Guest
Posted: Thu Jan 13, 2005 5:50 am    Post subject: Re: Certificate Authority Error Reply with quote
How are you generating the request? What toolset are you using. When you
submit a certificate request to an enterprise root CA, you must include
tempalte information. Even if the request is generated by a third party
Web server, you will still have to designate to use the WEb Server
certificate template as an example.

If you are using the WEb enrollment, you can designate the certificate
template on the submission page. See the advanced enrollment whitepaper
for details on this method:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technolog
ies/security/advcert.mspx

Brian

In article <OLheSIN#EHA.2452@TK2MSFTNGP14.phx.gbl>, jeffpoling@yahoo.com
says...
Quote:
We are trying to generate a new certifiacte request on a Win2003 Enterprise
Root CA. We get the following error:

The request contains no certificate template information 0x80094801
(-2146875391)
Denied by Policy Module 0x80094801, the request does not contain a
certificate template extension or Certificate template request attribute.

has anyone seen this error before? What are we doing wrong? How can we
troubleshoot this?

Thanks,

Jeff


Back to top
Jeff
Guest
Posted: Thu Jan 13, 2005 9:39 pm    Post subject: Re: Certificate Authority Error Reply with quote
We generated the certificate request both in a thrid-party product and then
in IIS. We then went to the CA and selected: "Submit New Request"

As soon as we select the text file that contains the certificate request, it
generates the error.

Perhaps we are not following the appropriate way to generate a certificate?

Thanks,

jeff

"Shreeniwas Kelkar [MSFT]" <skelkar@online.microsoft.com> wrote in message
news:uljCZlO%23EHA.3700@tk2msftngp13.phx.gbl...
Quote:
Can you describe your scenario in more detail? How was the certificate
request generated? How is it being submitted to the root CA? Is the root
CA online or offline?

--
Shreeniwas Kelkar [MSFT]

This posting is provided "AS IS" with no warranties, and confers no
rights.


"Jeff" <jeffpoling@yahoo.com> wrote in message
news:OLheSIN%23EHA.2452@TK2MSFTNGP14.phx.gbl...
We are trying to generate a new certifiacte request on a Win2003
Enterprise Root CA. We get the following error:

The request contains no certificate template information 0x80094801
(-2146875391)
Denied by Policy Module 0x80094801, the request does not contain a
certificate template extension or Certificate template request attribute.

has anyone seen this error before? What are we doing wrong? How can we
troubleshoot this?

Thanks,

Jeff


Back to top
Jeff
Guest
Posted: Thu Jan 13, 2005 9:39 pm    Post subject: Re: Certificate Authority Error Reply with quote
Where do I specify which template to use?

Thanks,

Jeff


"Brian Komar" <bkomar@nospam.identit.ca> wrote in message
news:MPG.1c4f73c71f5f7f9a9896b0@msnews.microsoft.com...
Quote:
How are you generating the request? What toolset are you using. When you
submit a certificate request to an enterprise root CA, you must include
tempalte information. Even if the request is generated by a third party
Web server, you will still have to designate to use the WEb Server
certificate template as an example.

If you are using the WEb enrollment, you can designate the certificate
template on the submission page. See the advanced enrollment whitepaper
for details on this method:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technolog
ies/security/advcert.mspx

Brian

In article <OLheSIN#EHA.2452@TK2MSFTNGP14.phx.gbl>, jeffpoling@yahoo.com
says...
We are trying to generate a new certifiacte request on a Win2003
Enterprise
Root CA. We get the following error:

The request contains no certificate template information 0x80094801
(-2146875391)
Denied by Policy Module 0x80094801, the request does not contain a
certificate template extension or Certificate template request attribute.

has anyone seen this error before? What are we doing wrong? How can we
troubleshoot this?

Thanks,

Jeff


Back to top
Brian Komar
Guest
Posted: Fri Jan 14, 2005 1:50 am    Post subject: Re: Certificate Authority Error Reply with quote
In article <uDePVYY#EHA.2196@TK2MSFTNGP11.phx.gbl>, jeffpoling@yahoo.com
says...
Quote:
Where do I specify which template to use?

Thanks,

Jeff


<snip>
The details are in the referenced white paper. Here is a synopsis:

1) Open http://certservername/certsrv
2) Click Request a certificate
3) Click Advanced Certificate Request
4) Click Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file,
or submit a renewal request by using a base-64-encoded PKCS #7 file.
5) In the Saved Request box, paste the certificate request string (from
the generated file.
6) In the Certificate Template drop-down list, select the desired
certificate template.
7) Click Submit


Quote:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technolog
ies/security/advcert.mspx

snip

Brian
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Security All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB