Forum Discussion

StefanoC66's avatar
StefanoC66
Iron Contributor
Jun 28, 2023

Web enrollment certificate no template

we have deployed a 2-tier CA with window 2019 servers

On the Enterprise domain ca we enabled also the web enrollment service.

However when we connect to generate certificates we got no templates available

We already checked the security permission of the published templates and the user we connect with has the read,enroll permission on the templates.

We already tried

- different browsers

- connecting locally and from remote

- we noticed that the CSP field remains in “Loading”

 

Using certificate’s MMC works fine

.

 

1 Reply

  • Since enrollment works through the Certificates MMC, the CA and basic template permissions are probably working correctly.

     

    First verify that the template is actually published on the CA:

     

    Certification Authority

    → Certificate Templates

    → New

    → Certificate Template to Issue

     

    Also check:

     

    Enroll permissions

    Compatibility settings

    Cryptography settings

    Subject Name configuration

     

    Keep in mind that /certsrv Web Enrollment is a legacy mechanism and doesn't behave exactly like MMC or autoenrollment.

     

    If normal MMC enrollment works, I would not change CA permissions simply because the template isn't shown in /certsrv.