You cannot add V2 or V3 templates after an inplace upgrade was performed on a Windows Server 2008 enterprise CA

Published Jan 24 2020 01:42 PM 162 Views
Microsoft

First published on TECHNET on Jul 31, 2008

Technically, it is possible to install an enterprise CA on a Windows Server Standard edition. With this configuration, enterprise features of the certification authority are intentionally not available.

To enable the CA enterprise features, it is required to upgrade a Windows Server from Standard to Enterprise edition. To keep the existing enterprise CA configuration, it is recommended to just perform a Windows inplace upgrade. If you do this on a Windows Server 2008 you will recognize that only V1 certificate templates are available for assigning after the upgrade was performed.

To fix the problem, close the Certificate Services MMC snap-in and run the following commands with administrator permissions at a command-line on the CA computer:

certutil -setreg ca\setupstatus +512

net stop certsvc

net start certsvc

When you re-open the Certificate Services MMC snap-in, you are able to assign V1, V2 and V3 certificate templates to the certification authority.

[February 3, 2009 update] An official Microsoft Knowledgebase article is published under http://support.microsoft.com/kb/967332 .

%3CLINGO-SUB%20id%3D%22lingo-sub-1128405%22%20slang%3D%22en-US%22%3EYou%20cannot%20add%20V2%20or%20V3%20templates%20after%20an%20inplace%20upgrade%20was%20performed%20on%20a%20Windows%20Server%202008%20enterprise%20CA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1128405%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3E%20First%20published%20on%20TECHNET%20on%20Jul%2031%2C%202008%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3ETechnically%2C%20it%20is%20possible%20to%20install%20an%20enterprise%20CA%20on%20a%20Windows%20Server%20Standard%20edition.%20With%20this%20configuration%2C%20enterprise%20features%20of%20the%20certification%20authority%20are%20intentionally%20not%20available.%3C%2FP%3E%0A%3CP%3ETo%20enable%20the%20CA%20enterprise%20features%2C%20it%20is%20required%20to%20upgrade%20a%20Windows%20Server%20from%20Standard%20to%20Enterprise%20edition.%20To%20keep%20the%20existing%20enterprise%20CA%20configuration%2C%20it%20is%20recommended%20to%20just%20perform%20a%20Windows%20inplace%20upgrade.%20If%20you%20do%20this%20on%20a%20Windows%20Server%202008%20you%20will%20recognize%20that%20only%20V1%20certificate%20templates%20are%20available%20for%20assigning%20after%20the%20upgrade%20was%20performed.%3C%2FP%3E%0A%3CP%3ETo%20fix%20the%20problem%2C%20close%20the%20Certificate%20Services%20MMC%20snap-in%20and%20run%20the%20following%20commands%20with%20administrator%20permissions%20at%20a%20command-line%20on%20the%20CA%20computer%3A%3C%2FP%3E%0A%3CP%3E%3CFONT%20face%3D%22Courier%20New%22%3E%20certutil%20-setreg%20ca%5Csetupstatus%20%2B512%20%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20face%3D%22Courier%20New%22%3E%20net%20stop%20certsvc%20%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20face%3D%22Courier%20New%22%3E%20net%20start%20certsvc%20%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3EWhen%20you%20re-open%20the%20Certificate%20Services%20MMC%20snap-in%2C%20you%20are%20able%20to%20assign%20V1%2C%20V2%20and%20V3%20certificate%20templates%20to%20the%20certification%20authority.%3C%2FP%3E%0A%3CP%3E%5BFebruary%203%2C%202009%20update%5D%20An%20official%20Microsoft%20Knowledgebase%20article%20is%20published%20under%20%3CA%20title%3D%22http%3A%2F%2Fsupport.microsoft.com%2Fkb%2F967332%22%20href%3D%22http%3A%2F%2Fsupport.microsoft.com%2Fkb%2F967332%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%20http%3A%2F%2Fsupport.microsoft.com%2Fkb%2F967332%20%3C%2FA%3E%20.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1128405%22%20slang%3D%22en-US%22%3E%3CP%3EFirst%20published%20on%20TECHNET%20on%20Jul%2031%2C%202008%20Technically%2C%20it%20is%20possible%20to%20install%20an%20enterprise%20CA%20on%20a%20Windows%20Server%20Standard%20edition.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1128405%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECarstenKinder%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Version history
Last update:
‎Feb 20 2020 02:51 PM
Updated by: