unable to install Root CA certificate on Issuing CA.

Question

I am trying to install Root certificate on Issuing CA but getting below msg.

"An error was detected while configuring Active Directory Certificate Services. The Active Directory Certificate Services Setup Wizard will need to be rerun to complete the configuration. The new Certification Authority certificate cannot be installed because the CA Version extension is incorrect. The most recently generated request file should be used to obtain the new certificate: C:\CA(1).req The data is invalid. 0x800x7000d (WIN32: 13 ERROR_INVALID_DATA)

Answer 1

Hello Babaji Gore,

Thank you for posting in Q&A forum.

Here is a similar thread with possible resolution for your reference.
https://serverfault.com/questions/1003120/windows-server-2019-adcs-unable-to-install-subordinate-ca-certificate

If it does not work, you may need to follow the steps in the link below to set it up from scratch in test lab.

https://social.technet.microsoft.com/wiki/contents/articles/15037.ad-cs-step-by-step-guide-two-tier-pki-hierarchy-deployment.aspx#:~:text=Install%20a%20new%20forest%20by%20using%20Server%20Manager.,Required%20Features%20and%20then%20click%20Next.%20See%20More.

If you have any question during the deployment, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.