Request Certificate CA

Question

I have a Windows server configured as a Certificate Authority (CA).

When requesting a certificate via https://server/certServ and choosing the template to request (Request Certificate->Advance Certifcate Request) I do not get all the options to fill in the certificate

it should look like this

Thanks

Answer 1

Hello there,

The CA Web enrollment pages perform a case-sensitive string comparison of two values. One value is the sServerConfig value in the Certdat.inc file in the %systemroot%\System32\Certsrv folder on the certificate server, and the other value is the dnsHostName attribute on the pkiEnrollmentService object in Active Directory. If the two strings do not match, including the case match, the enrollment fails.

If you're running CA servers on Windows 2008 R2 and above and trying to request a computer certificate templates V3 using web enrollment (CAWE), it will not work.

This was an enhancement that we introduced in Windows 2008 R2.

Now web enrollment (CAWE) doesn't support V3 templates.

You can use mmc, auto enrollment, and certreq.exe to request a V3 template.

Not able to request certificate using web enrollment https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/cannot-request-certificate-with-web-enrollment

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer–