Get-Certificate -Template 'Templatename' -CertStoreLocation 'cert:\LocalMachine\My' -Credential (get-credential)
And check you rights for this cert template.
Get-Certificate cmdlet failed
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 11%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPS%3C/text%3E%3C/svg%3E)
Petr Synek
6
Reputation points
I need to issue a certificate for a server. I run these commands:
$cred = Get-Credential Get-Certificate -Template Templatename -CertStoreLocation Cert:\LocalMachine\My -Credential $cred
But after the second command I get this error:
Get-Certificate :
At line:1 char:1
+ Get-Certificate -Template Templatename -CertStoreLocation Cert:\LocalMachine\ ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Get-Certificate], ParameterBindingException
+ FullyQualifiedErrorId : RuntimeException,Microsoft.CertificateServices.Commands.GetCertificateCommand
What's this? I mean, there's no description of the error. What's wrong? Is that something in the command syntax, is something wrong with the server, with the network... How do I solve this?
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Server | User experience | PowerShell
Windows for business | Windows Server | User experience | Other
-
Petr Synek 6 Reputation points
2022-06-14T13:05:03.247+00:00 Sorry for the formatting. I didn't expect the code will be put to one row when it was written on two rows in the text. The error message was put in using the same method (I clicked the binary code icon in the toolbar) but this time a window appeared to put the code in, instead of just the text "enter code here" text between the single quotes like it was with the commands. Since I didn't see any preview anywhere I didn't know how it would look like after posting.
Sign in to comment
5 answers
Sort by: Most helpful
-
mr.Eilsafin 1 Reputation point2025-04-01T12:58:53.29+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 46%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER4%3C/text%3E%3C/svg%3E)
rr-4098 2,291 Reputation points2022-06-20T14:31:13.693+00:00 Sorry for the confusion, I meant to say upgrade Powershell not the OS.
-
Petr Synek 6 Reputation points
2022-06-20T17:26:48.837+00:00 Yes, I understood it. But even powershell upgrade requires an approval from several people from customer and several from our side before it can be done. The fastest time it can be performed is one week. If an action requires a reboot, usually it can’t be done in other time than during regular monthly patching unless there’s a real emergency or the server isn’t used at the relevant time.
Sign in to comment -
-
rr-4098 2,291 Reputation points
2022-06-19T09:17:49.097+00:00 What OS is the server running? If possible see if you can upgrade Powershell to 5.1.
-
Petr Synek 6 Reputation points
2022-06-20T08:43:31.657+00:00 Windows Server 2012 R2. PS version is 4.0, but it's not possible to upgrade. The server is in an environment containing several thousands of servers and every single change must be carefully documented or there would be horrible mess in it. So it's not really easy to make such relatively big change.
-
Sign in to comment -
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 74%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Rich Matheisen 48,116 Reputation points2022-06-17T14:43:51.767+00:00 If you look at the properties of the template "Templatename", do you have permission to "Read" and "Enroll" using the template (either explicitly or through security group membership)?
-
Petr Synek 6 Reputation points
2022-06-17T15:46:22.52+00:00 Yes, I normally enroll certificates from servers of the same domain without any problems, using the same domain account, so permissions isn't the issue.
-
Rich Matheisen 48,116 Reputation points
2022-06-17T19:11:54.15+00:00 The most common cause of a ParameterBindingException is a mismatch between the expected type of value and the supplied type. E.g., the parameter is strongly typed as "X" and the value supplied is of type "Z" -- and there is no available method of casting "Z" to an object of type "X".
Since you have only three parameters, I'd start by verifying that $cred actually contains a credential object. Then check the two string values for possible Unicode equivalent values, even though they appear to be ASCII.
-
rr-4098 2,291 Reputation points
2022-06-18T09:28:46.603+00:00 What version of Powershell are you running? $PSversionTable
-
Petr Synek 6 Reputation points
2022-06-18T10:23:39.637+00:00 I think it's 3.0 but I'll check on Monday. Unfortunately we have a different version on each server, after getting the environment from India we still weren't able to consolidate all that mess there in two years, there's just too much of it.
-
Petr Synek 6 Reputation points
2022-06-20T08:53:46.897+00:00 So it's version 4.0 But the icon looks like 3.0, which confused me. 4.0 should have the same icon as 5 / 5.1, right?
-
Sign in to comment -
-
rr-4098 2,291 Reputation points
2022-06-15T18:42:55.757+00:00 Are you getting any error codes like 0x<RandomNumbersandLetters>?
-
-
rr-4098 2,291 Reputation points
2022-06-17T12:29:01.273+00:00 What OS is the server running? If you try to issue the cert for the server via the GUI without using Powershell, do you still get error? Check the event logs "Apps and Services -> Windows" CertificateClients logs to see if they have any further information on this error.
-
Petr Synek 6 Reputation points
2022-06-17T15:49:12.237+00:00 Windows Server 2012 (not R2). GUI fails as well. I don't remember the error message exactly anymore and since it's Friday and I'm out of work already I won't get to it till Monday.
-
Petr Synek 6 Reputation points
2022-06-20T08:50:09.807+00:00 Sorry, it's 2012 R2. I've mistaken the server for another one I have problems with. In case of this one there is no error in GUI, it just doesn't show any available policies (templates) to enroll the certificate with. Not even the "Show all templates" checkbox is present. Just "Certificate types not available: You cannot request a certificate at this time because no certificate types are available. If you need a certificate, please contact your administrator." message is shown above the are where the list of available templates should be displayed. And the Close button in the bottom right of course.
-
Sign in to comment -