Error "Template information could not be loaded" Element not found.

Question

Please I want to issue a certificate using the certification Authority role.

but when I wanted to set the issue using the template I had created, I got the error "template information could not be loaded" Element not found.

As far as I remember, I restored my CA from another DC Server.

Please help step by step

Thank You

Answer 1

Hello Valentinus Fao,

Thank you for posting in Microsoft Community forum.

Based on my knowledge, certificate template is stored on Domain Controller in AD.

1.Please ensure your Domain Controllers in the domain are online and running.

2.You can try to check if you can ping the domain and IP of the DC and FQDN of the domain on CA server.

For example:
If you domain name is a.com and the IP of the domain is 1.1.1.1 and the name of Domain controller is DC (if your DC is also a DNS server).

ping a.com

ping 1.1.1.1

ping DC.a.com

3.Check if your CA server can communicate to Domain and Domain Controllers.

I hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

Answer 2

Hello Daisy Zhou

So the infrastructure for my domain has 2 servers that are always replicated

domain a and domain b, initially the CA role was installed in domain a but because the domain a server experienced problems (crush) the CA was moved to domain b

and when I wanted to try the template on domain B it couldn't be opened, I got the error I posted above

Thank You

Answer 3

Hello Valentinus Fao,

Thank you for your reply.

You can find the DC partner and force AD replication via click "Replicate Now" button in AD sites and services.

Best Regards,
Daisy Zhou

Answer 4

Hello Valentinus Fao,

Thank you for your reply.

I understand you migrate Online Enterprise CA from one DC to another DC.

Did you also select Enterprise CA on the second DC when migrating CA?

If so, you can refer to possible solution in the link below.

[d632-5544-507-329b] (microsoft.com)

Active Directory Certificate Services (AD CS): How to Restore the pKIEnrollmentService object - TechNet Articles - United States (English) - TechNet Wiki (microsoft.com)

Tip: Usually, we want a DC to be just a DC, there is nothing else, because this reduces possible resource conflicts and exploit vulnerabilities and minimizes patching of other applications that might cause downtime.

Ideally, a DC should be easy to replace, just by standing up another DC.

When we put other software and roles on one DC, maybe the DC is harder to replace it.

For example,

If we have a DC with AD CS(it is also a CA server), if there is some issues with this DC and we want to demote this DC, we need to remove AD CS first and then demote this DC.

Best Regards,
Daisy Zhou

Answer 5

The certificate template was resolved when I restarted the pKIEnrollmentService by renewing the CA Certificate

but when I want to issue via template, my template that I have created doesn't appear

there is a note to wait until the information related to the template is replicated to all domains

Is there a way to force it so that I can bring up my template and issue the template to CA?

Thank You