Certificate template not showing

Question

Hi Guys,

I have migrated my 2 tier PKI from Windows Server 2012 r2 to Windows Server 2019. Evrything is good except certificate templates are missing. When i check the container in AD sites and services the list of certificate templates is still there, is there a way to make it appear in certificate authority.

Answer 1

Hello @bizcntradmin ,

Thank you for posting here.

Based on the description, do you mean all the certificate templates are missing or only custom certificate templates are missing when issue certificate templates?

If all the certificate templates are missing, we can open certificate ttemplate console and check the certificate templates are stored on which DC (if you have one than one DC in the domain).

For example,

Here is stored on DC named 2012R2.

If we connected to another DC, we can see all the certificate templates, maybe there is issue about AD replication.

We can whether check AD replication is working fine. On one DC and run repadmin /replsum and repadmin /showrepl * /csv >C:\showrepl.csv to check the there is any issue about AD replication (if there is no any error message, then AD replication is working fine).

If we mean only custom certificate templates are missing when issue certificate templates. We can check if the "flags" below is 10 or not.

ADSI\Configuration\Services\Public Key Services\Enrollment Services\right sub CA name->Properties->flags.

Hope the information above is helpful. If anything is unclear, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi,

The certificate template created through enterprise PKI is saved on configuration partition in the forest level and , it replicated on all domain controllers in the forest. There is no certificate template in AD site level.
There is no sense to talk about move certificate template from AD site to PKI.

Please don't forget to mark this reply as answer if it help your to fix your issue

Answer 3

I can't find the Certificate Template here. Anyone can help us on this. Thank you in advance.