PKI Server Issue - Certificate types are not available

Question

I created clustered PKI servers using windows server 2022. When try to "Request New Certificate..." from any of the member servers in the domain, the Certificate Enrolment windows is empty (Certificate types are not available): ![194654-screenshot-2022-04-20-at-53034-pm.png][1] When Click on "Show all templates", I can see this error: ![194664-screenshot-2022-04-20-at-53403-pm.png][2] Any Ideas? At least i can see this certificate when trying to request using the PKI server: ![194577-screenshot-2022-04-20-at-55837-pm.png][3] [1]: /api/attachments/194654-screenshot-2022-04-20-at-53034-pm.png?platform=QnA [2]: /api/attachments/194664-screenshot-2022-04-20-at-53403-pm.png?platform=QnA [3]: /api/attachments/194577-screenshot-2022-04-20-at-55837-pm.png?platform=QnA

Answer 1

Hello,

The cause of this can have several reasons such as: No permissions, expired certificates or the account which is loading the MMC console is not the right account. Local user login + enrollment using MMC / cert manager console will not work. These errors you are mentioning are probably caused by opening the certificates snap-in with the wrong account. Try to reopen with the correct account.

There is an enrollment scheduled task built-in you can try to run it manually. The certificate enrollment request should run in "System" context if you are using the LDAP enrollment method.

---

--If the reply is helpful, please Upvote and Accept as answer--