Certificate Authority does not show Templates
up vote
3
down vote
favorite
No templates are shown in the Template folder of the Certificate Authority.
In the Certificate Templates (certtmpl.msc) are Templates shown.
Running certutil -CATemplates returns 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND) CertUtil: Element not found.
Restarting the service did not help
Sreenshot of CN=OID shows the following result
There are also no entries under CN:Enrollment Services
windows-server-2012-r2 certificate-authority
asked Nov 17 at 16:00
Mister 832
1306
add a comment |
up vote
3
down vote
favorite
No templates are shown in the Template folder of the Certificate Authority.
In the Certificate Templates (certtmpl.msc) are Templates shown.
Running certutil -CATemplates returns 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND) CertUtil: Element not found.
Restarting the service did not help
Sreenshot of CN=OID shows the following result
There are also no entries under CN:Enrollment Services
windows-server-2012-r2 certificate-authority
asked Nov 17 at 16:00
Mister 832
1306
DoesCN=OIDcontainer has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) underCN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext}container.
– Crypt32
Nov 17 at 16:06
See update in question
– Mister 832
Nov 17 at 16:12
add a comment |
up vote
3
down vote
favorite
up vote
3
down vote
favorite
No templates are shown in the Template folder of the Certificate Authority.
In the Certificate Templates (certtmpl.msc) are Templates shown.
Running certutil -CATemplates returns 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND) CertUtil: Element not found.
Restarting the service did not help
Sreenshot of CN=OID shows the following result
There are also no entries under CN:Enrollment Services
windows-server-2012-r2 certificate-authority
asked Nov 17 at 16:00
Mister 832
1306
No templates are shown in the Template folder of the Certificate Authority.
In the Certificate Templates (certtmpl.msc) are Templates shown.
Running certutil -CATemplates returns 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND) CertUtil: Element not found.
Restarting the service did not help
Sreenshot of CN=OID shows the following result
There are also no entries under CN:Enrollment Services
windows-server-2012-r2 certificate-authority
windows-server-2012-r2 certificate-authority
asked Nov 17 at 16:00
Mister 832
1306
asked Nov 17 at 16:00
Mister 832
1306
edited Nov 18 at 9:05
asked Nov 17 at 16:00
Mister 832
1306
asked Nov 17 at 16:00
Mister 832
1306
asked Nov 17 at 16:00
Mister 832
1306
1306
DoesCN=OIDcontainer has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) underCN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext}container.
– Crypt32
Nov 17 at 16:06
See update in question
– Mister 832
Nov 17 at 16:12
add a comment |
DoesCN=OIDcontainer has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) underCN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext}container.
– Crypt32
Nov 17 at 16:06
See update in question
– Mister 832
Nov 17 at 16:12
Does
CN=OID container has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) under CN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext} container.– Crypt32
Nov 17 at 16:06
Does
CN=OID container has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) under CN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext} container.– Crypt32
Nov 17 at 16:06
See update in question
– Mister 832
Nov 17 at 16:12
See update in question
– Mister 832
Nov 17 at 16:12
add a comment |
1 Answer
1
active
oldest
votes
up vote
5
down vote
accepted
It looks like that your templates are ok and OIDs are ok as well.
Try to restart certificate service (certsvc) on new CA and check if templates are loaded. If this doesn't help, then stop certsvc on CA, then remove templates in CA record under CN=Enrollment Services, CN=Public Key Services, CN=Services,{configurationNamingContext}. Open CA record, navigate to certificateTemplates attribute:
- record a list of certificate templates you see them (just write somewhere).
- clear list by removing all entries from this attribute.
- Open Certification Authority MMC snap-in (
certsrv.msc), startcertsvcand try to add templates manually from the record you made in step 1.
answered Nov 17 at 16:19
Crypt32
3,238923
Sorry, but does new CA mean, I should reinstall the certificate Authority?
– Mister 832
Nov 18 at 8:59
Where did I say about new CA?
– Crypt32
Nov 18 at 9:01
Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
– Mister 832
Nov 18 at 9:06
I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
– Mister 832
Nov 18 at 9:14
You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record inEnrollment Servicescontainer. I didn't say anything aboutCertificate TemplatesDS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
– Crypt32
Nov 18 at 9:36
add a comment |
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
5
down vote
accepted
It looks like that your templates are ok and OIDs are ok as well.
Try to restart certificate service (certsvc) on new CA and check if templates are loaded. If this doesn't help, then stop certsvc on CA, then remove templates in CA record under CN=Enrollment Services, CN=Public Key Services, CN=Services,{configurationNamingContext}. Open CA record, navigate to certificateTemplates attribute:
- record a list of certificate templates you see them (just write somewhere).
- clear list by removing all entries from this attribute.
- Open Certification Authority MMC snap-in (
certsrv.msc), startcertsvcand try to add templates manually from the record you made in step 1.
answered Nov 17 at 16:19
Crypt32
3,238923
Sorry, but does new CA mean, I should reinstall the certificate Authority?
– Mister 832
Nov 18 at 8:59
Where did I say about new CA?
– Crypt32
Nov 18 at 9:01
Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
– Mister 832
Nov 18 at 9:06
I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
– Mister 832
Nov 18 at 9:14
You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record inEnrollment Servicescontainer. I didn't say anything aboutCertificate TemplatesDS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
– Crypt32
Nov 18 at 9:36
add a comment |
up vote
5
down vote
accepted
It looks like that your templates are ok and OIDs are ok as well.
Try to restart certificate service (certsvc) on new CA and check if templates are loaded. If this doesn't help, then stop certsvc on CA, then remove templates in CA record under CN=Enrollment Services, CN=Public Key Services, CN=Services,{configurationNamingContext}. Open CA record, navigate to certificateTemplates attribute:
- record a list of certificate templates you see them (just write somewhere).
- clear list by removing all entries from this attribute.
- Open Certification Authority MMC snap-in (
certsrv.msc), startcertsvcand try to add templates manually from the record you made in step 1.
answered Nov 17 at 16:19
Crypt32
3,238923
Sorry, but does new CA mean, I should reinstall the certificate Authority?
– Mister 832
Nov 18 at 8:59
Where did I say about new CA?
– Crypt32
Nov 18 at 9:01
Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
– Mister 832
Nov 18 at 9:06
I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
– Mister 832
Nov 18 at 9:14
You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record inEnrollment Servicescontainer. I didn't say anything aboutCertificate TemplatesDS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
– Crypt32
Nov 18 at 9:36
add a comment |
up vote
5
down vote
accepted
up vote
5
down vote
accepted
It looks like that your templates are ok and OIDs are ok as well.
Try to restart certificate service (certsvc) on new CA and check if templates are loaded. If this doesn't help, then stop certsvc on CA, then remove templates in CA record under CN=Enrollment Services, CN=Public Key Services, CN=Services,{configurationNamingContext}. Open CA record, navigate to certificateTemplates attribute:
- record a list of certificate templates you see them (just write somewhere).
- clear list by removing all entries from this attribute.
- Open Certification Authority MMC snap-in (
certsrv.msc), startcertsvcand try to add templates manually from the record you made in step 1.
answered Nov 17 at 16:19
Crypt32
3,238923
It looks like that your templates are ok and OIDs are ok as well.
Try to restart certificate service (certsvc) on new CA and check if templates are loaded. If this doesn't help, then stop certsvc on CA, then remove templates in CA record under CN=Enrollment Services, CN=Public Key Services, CN=Services,{configurationNamingContext}. Open CA record, navigate to certificateTemplates attribute:
- record a list of certificate templates you see them (just write somewhere).
- clear list by removing all entries from this attribute.
- Open Certification Authority MMC snap-in (
certsrv.msc), startcertsvcand try to add templates manually from the record you made in step 1.
answered Nov 17 at 16:19
Crypt32
3,238923
answered Nov 17 at 16:19
Crypt32
3,238923
answered Nov 17 at 16:19
Crypt32
3,238923
answered Nov 17 at 16:19
Crypt32
3,238923
3,238923
Sorry, but does new CA mean, I should reinstall the certificate Authority?
– Mister 832
Nov 18 at 8:59
Where did I say about new CA?
– Crypt32
Nov 18 at 9:01
Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
– Mister 832
Nov 18 at 9:06
I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
– Mister 832
Nov 18 at 9:14
You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record inEnrollment Servicescontainer. I didn't say anything aboutCertificate TemplatesDS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
– Crypt32
Nov 18 at 9:36
add a comment |
Sorry, but does new CA mean, I should reinstall the certificate Authority?
– Mister 832
Nov 18 at 8:59
Where did I say about new CA?
– Crypt32
Nov 18 at 9:01
Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
– Mister 832
Nov 18 at 9:06
I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
– Mister 832
Nov 18 at 9:14
You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record inEnrollment Servicescontainer. I didn't say anything aboutCertificate TemplatesDS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
– Crypt32
Nov 18 at 9:36
Sorry, but does new CA mean, I should reinstall the certificate Authority?
– Mister 832
Nov 18 at 8:59
Sorry, but does new CA mean, I should reinstall the certificate Authority?
– Mister 832
Nov 18 at 8:59
Where did I say about new CA?
– Crypt32
Nov 18 at 9:01
Where did I say about new CA?
– Crypt32
Nov 18 at 9:01
Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
– Mister 832
Nov 18 at 9:06
Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
– Mister 832
Nov 18 at 9:06
I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
– Mister 832
Nov 18 at 9:14
I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
– Mister 832
Nov 18 at 9:14
You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record in
Enrollment Services container. I didn't say anything about Certificate Templates DS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.– Crypt32
Nov 18 at 9:36
You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record in
Enrollment Services container. I didn't say anything about Certificate Templates DS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.– Crypt32
Nov 18 at 9:36
add a comment |
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f940508%2fcertificate-authority-does-not-show-templates%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Does
CN=OIDcontainer has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) underCN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext}container.– Crypt32
Nov 17 at 16:06
See update in question
– Mister 832
Nov 17 at 16:12