This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 11%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPS%3C/text%3E%3C/svg%3E)
I need to issue a certificate for a server. I run these commands:
$cred = Get-Credential Get-Certificate -Template Templatename -CertStoreLocation Cert:\LocalMachine\My -Credential $cred
But after the second command I get this error:
Get-Certificate :
At line:1 char:1
+ Get-Certificate -Template Templatename -CertStoreLocation Cert:\LocalMachine\ ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Get-Certificate], ParameterBindingException
+ FullyQualifiedErrorId : RuntimeException,Microsoft.CertificateServices.Commands.GetCertificateCommand
What's this? I mean, there's no description of the error. What's wrong? Is that something in the command syntax, is something wrong with the server, with the network... How do I solve this?
Sorry for the formatting. I didn't expect the code will be put to one row when it was written on two rows in the text. The error message was put in using the same method (I clicked the binary code icon in the toolbar) but this time a window appeared to put the code in, instead of just the text "enter code here" text between the single quotes like it was with the commands. Since I didn't see any preview anywhere I didn't know how it would look like after posting.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 46%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER4%3C/text%3E%3C/svg%3E)
Are you getting any error codes like 0x<RandomNumbersandLetters>?
No, this is all I get.
What OS is the server running? If you try to issue the cert for the server via the GUI without using Powershell, do you still get error? Check the event logs "Apps and Services -> Windows" CertificateClients logs to see if they have any further information on this error.
Windows Server 2012 (not R2). GUI fails as well. I don't remember the error message exactly anymore and since it's Friday and I'm out of work already I won't get to it till Monday.
Sorry, it's 2012 R2. I've mistaken the server for another one I have problems with. In case of this one there is no error in GUI, it just doesn't show any available policies (templates) to enroll the certificate with. Not even the "Show all templates" checkbox is present. Just "Certificate types not available: You cannot request a certificate at this time because no certificate types are available. If you need a certificate, please contact your administrator." message is shown above the are where the list of available templates should be displayed. And the Close button in the bottom right of course.
كويس
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 74%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
If you look at the properties of the template "Templatename", do you have permission to "Read" and "Enroll" using the template (either explicitly or through security group membership)?
Yes, I normally enroll certificates from servers of the same domain without any problems, using the same domain account, so permissions isn't the issue.
The most common cause of a ParameterBindingException is a mismatch between the expected type of value and the supplied type. E.g., the parameter is strongly typed as "X" and the value supplied is of type "Z" -- and there is no available method of casting "Z" to an object of type "X".
Since you have only three parameters, I'd start by verifying that $cred actually contains a credential object. Then check the two string values for possible Unicode equivalent values, even though they appear to be ASCII.
What version of Powershell are you running? $PSversionTable
I think it's 3.0 but I'll check on Monday. Unfortunately we have a different version on each server, after getting the environment from India we still weren't able to consolidate all that mess there in two years, there's just too much of it.
So it's version 4.0 But the icon looks like 3.0, which confused me. 4.0 should have the same icon as 5 / 5.1, right?
تمام
What OS is the server running? If possible see if you can upgrade Powershell to 5.1.
Windows Server 2012 R2. PS version is 4.0, but it's not possible to upgrade. The server is in an environment containing several thousands of servers and every single change must be carefully documented or there would be horrible mess in it. So it's not really easy to make such relatively big change.
جميل
Sorry for the confusion, I meant to say upgrade Powershell not the OS.
Yes, I understood it. But even powershell upgrade requires an approval from several people from customer and several from our side before it can be done. The fastest time it can be performed is one week. If an action requires a reboot, usually it can’t be done in other time than during regular monthly patching unless there’s a real emergency or the server isn’t used at the relevant time.