Certificate enrollment fails for the smart card template.

Question

Hi,

I have set up a certificate template for yubikey(PIV) smart card authentication . The enrollment of the certificate fails with error message:

Certificate enrollment for <DomainName\User> failed in authentication to all urls for enrollment server associated with policy id: {671F4BEC-78C2-4E83-90A5-43DD8DFD933B} (The file name is too long. 0x8007006f (WIN32/HTTP: 111 ERROR_BUFFER_OVERFLOW)). Failed to enroll for template: <TemplateName>

Enabled Win32 long paths both on Windows 11 23H2 Pro Workstation but it made no difference to the error.

Answer 1

Hello Sam_LI_2024,

Thank you for posting in Microsoft Community forum.

How did you enroll certificate for the smart card template?

Did you enroll it manually via MMC.exe?

Did you enroll this certificate using the Windows AD CS server?

It may be the issue with the subject name in the certificate template. You can try to change the subject name in the certificate template and check if it helps.

Here is a similar thread with the same error message "The file name is too long. 0x8007006f (WIN32/HTTP: 111 ERROR_BUFFER_OVERFLOW)" for your reference.

The file name is too long. 0x8007006f Error with NDES & SCEP Profile in Intune - Microsoft Community Hub

I hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

Answer 2

Thanks for the response.

Yes, trying to enroll manually via MMC as the user logged in has permissions for auto enrollment and autoenroll GPO is applied for the user. Strange thing is, the same certificate template with the subject name worked earlier fine. Its as though some windows update or GPO got pushed thats causing the problem.

Answer 3

Hello Sam_LI_2024,

Thank you for your reply.

Now if you try to change the subject name in the certificate template, can you enroll the certificate successfully?

If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

Answer 4

Inspite of changing the Subject name format from DistinguishedName to Common name in the template i still face the same issue

Answer 5

Hello Sam_LI_2024,

Good day!

Based on the description "Strange thing is, the same certificate template with the subject name worked earlier fine", what changes did you make recently?

Please check if the problem occurs on all the domain users or all the domain machines?

Best Regards,
Daisy Zhou