certreq -Enroll

Question

Hello

I tried to use the below command in order to renew certificate but i have an error (The request contains no certificate template information)

certreq -Enroll -cert certificateSerialNumber -machine Renew

How can i solve this issue?

Answer 1

This is wrong paramter

Answer 2

Ok, I've just checked the certreq docs, it seems that you can't renew the certificate if it does not contain certificate template information inside. You will have to request brand new certificate based on certificate template.

Answer 3

Hello @Moonlight ,

Thank you for posting here.

Based on the description, I did a test in my lab.

Renew machine certificate:

1. Find the serial number of ths certificate and renew certificate with command below (logon the machine with domain Administrator, open CMD and run as Administrator). Check if it is the certificate we want to renew, If so, click OK button.

certreq -enroll -machine -cert <certificateSerialNumber> renew

For example:
certreq -enroll -machine -cert 7a000000aa9a6f2b39229c893d0001000000aa renew

2. Click Next button.

3. Click Enroll button.

4. The certificate is renewed successfully.

Renew user certificate:

1. Find the serial number of ths certificate and renew certificate with command below (open CMD, do not run as Administrator):

certreq -enroll -user -cert <certificateSerialNumber> renew

For example:
certreq -enroll -user -cert 7a000000ae610e95b6350f629f0001000000ae renew

2. Check if it is the certificate we want to renew, If so, click Next button and Enroll button.

3. The certificate is renewed successfully.

Tips:

1. From the description, we can see, we should delete the spaces in the serial number.
2. The command contains the incorrect synbol.
   
3. If we have more than one CA in AD environment, we should check the CA server that issue the certificate.
   

Hope the information is helpful. If anything is unclear, please feel free to let us know.

For more information we can refer to the link below.
certreq
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/certreq_1

Best Regards,
Daisy Zhou