{"id":143,"date":"2012-03-29T15:32:47","date_gmt":"2012-03-29T15:32:47","guid":{"rendered":"http:\/\/wawszczak.pr0.pl\/?p=143"},"modified":"2012-03-29T15:49:19","modified_gmt":"2012-03-29T15:49:19","slug":"microsoft-enterprise-ca-nie-zezwala-na-publikacj%c4%99-szablon%c3%b3w-v2-i-v3","status":"publish","type":"post","link":"https:\/\/wawszczak.pr0.pl\/en\/2012\/03\/29\/microsoft-enterprise-ca-nie-zezwala-na-publikacj%c4%99-szablon%c3%b3w-v2-i-v3\/","title":{"rendered":"Microsoft Enterprise CA doesn’t allow to publish templates V2 and V3"},"content":{"rendered":"

Under some circumstances after installation Windows Enterprise Operating System and configuration of AD Certification Services as Enterprise CA, the CA Services still doesn’t allow publication of certificate templates in versions higher than V1. This is because of misconfiguration of registry entries, which determines type of CA installation as Standard.
\n\"Okno
\nThe solution for this problem is proper setup of bit flag in the CA configuration. It can be done with following command:<\/p>\n

1
<\/div><\/td>
certutil -setreg ca\\setupstatus +512<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

After registry update, there is necessity of restart CA service.
\nMore over, there is possibility of manual edition of the templates list, which is used by CA for certificates enrollment. It is possible by edition of attribute<\/p>\n

1
<\/div><\/td>
certificateTemplates<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

in object<\/p>\n

1
<\/div><\/td>
pKIEntrollmentService<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

. These objects are available under following path<\/p>\n

1
<\/div><\/td>
CN=Internal Issuing CA,CN=Enrollment Services,CN=Public Key Services,CN=Services,CN=Configuration,DC=contonso,DC=lab<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

<\/p>","protected":false},"excerpt":{"rendered":"

Under some circumstances after installation Windows Enterprise Operating System and configuration of AD Certification Services as Enterprise CA, the CA Services still doesn’t allow publication of certificate templates in versions higher than V1. This is because of misconfiguration of registry … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,20,3],"tags":[5,32,11],"class_list":["post-143","post","type-post","status-publish","format-standard","hentry","category-pki","category-solutions-2","category-windows-service","tag-ad-cs","tag-enterprise-templates","tag-microsoft"],"_links":{"self":[{"href":"https:\/\/wawszczak.pr0.pl\/en\/wp-json\/wp\/v2\/posts\/143","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wawszczak.pr0.pl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wawszczak.pr0.pl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wawszczak.pr0.pl\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wawszczak.pr0.pl\/en\/wp-json\/wp\/v2\/comments?post=143"}],"version-history":[{"count":5,"href":"https:\/\/wawszczak.pr0.pl\/en\/wp-json\/wp\/v2\/posts\/143\/revisions"}],"predecessor-version":[{"id":147,"href":"https:\/\/wawszczak.pr0.pl\/en\/wp-json\/wp\/v2\/posts\/143\/revisions\/147"}],"wp:attachment":[{"href":"https:\/\/wawszczak.pr0.pl\/en\/wp-json\/wp\/v2\/media?parent=143"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wawszczak.pr0.pl\/en\/wp-json\/wp\/v2\/categories?post=143"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wawszczak.pr0.pl\/en\/wp-json\/wp\/v2\/tags?post=143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}