How to configure what certificates can be issued using Web Enrollment in Windows Server 2008 R2 Enterprise?

Posted by antik on Server Fault See other posts from Server Fault or by antik
Published on 2010-12-17T21:17:03Z Indexed on 2010/12/21 16:56 UTC
Read the original article Hit count: 232

Filed under:

windows-server-2008-r2

|

certificate-authority

I have a CA installed on of my Windows Servers in a small farm of systems. I've installed the Certification Authority Web Enrollment and Certificate Enrollment Web Service roles on the CA.

I want to issue a Computer certificate to a computer not jointed to my domain. The user attempting web enrollment has domain credentials.

The user was able to navigate to https://myServerHostname/certsrv and request a User certificate successfully.

However, the user needs a Computer cert as well. From the certsrv site, the user tried the following:

Advanced Certificate Request
Create and Submit a Request to this CA

However, the Computer certificate template is not available under the Certificate Template heading. He is only seeing "User" and "Basic EFS".

How do I configure the CA to allow him to request a Computer cert for his system?

© Server Fault or respective owner

Related posts about windows-server-2008-r2

Cannot enable network discovery on Windows Server 2008 R2

as seen on Server Fault - Search for 'Server Fault'
I'm trying to enable the Network Discovery feature on a newly installed Windows Server 2008 R2 instance. The network connection is in the Home or Work profile (it is not domain joined). These are the steps I've followed: Within the Network and Sharing Center I select Change advanced sharing settings Then… >>> More
Windows Server 2008 R2: AD Module for Windows PowerShell

as seen on Internet.com - Search for 'Internet.com'
Windows Server 2008 R2 includes a new Active Directory module for Windows PowerShell, a consolidated group of 76 cmdlets that can perform a host of tasks against Active Directory's various services. >>> More
Windows Server 2008 R2: Introducing the AD Administrative Center

as seen on Internet.com - Search for 'Internet.com'
The Active Directory Administrative Center in Windows Server 2008 R2 is a significant improvement over its predecessor. Although not without limitations, it offers beefed-up management of AD objects, new navigation capabilities, better task-based management options, and improvements to the properties… >>> More
Sun Fire X4270 M3 SAP Enhancement Package 4 for SAP ERP 6.0 (Unicode) Two-Tier Standard Sales and Distribution (SD) Benchmark

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Oracle's Sun Fire X4270 M3 server achieved 8,320 SAP SD Benchmark users running SAP enhancement package 4 for SAP ERP 6.0 with unicode software using Oracle Database 11g and Oracle Solaris 10. The Sun Fire X4270 M3 server using Oracle Database 11g and Oracle Solaris 10… >>> More
Now Customers Can Actually Locate Your Resources with URL Rewriter 2.0 RTW

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
Today, Microsoft announced the final release of IIS URL Rewriter 2.0 RTW . Now the first reason might be obvious why you would want to rewrite a URL – when you are at a cocktail party with loud music and tasty appetizers and a potential customer asks you where they can get more info on your snazzy… >>> More

Related posts about certificate-authority

Certificate Authority issuing Basic EFS certificates without Autoenroll

as seen on Server Fault - Search for 'Server Fault'
We have observed some puzzling behavior from the CAs we have set up in both the past and present. For some reason unknown to us, it seems that our CAs are randomly issuing "Basic EFS" certificates to our users. This is evident through the "Issued Certificates" log on the CA. I personally set up a… >>> More
Add a custom certificate authority to Ubuntu

as seen on Server Fault - Search for 'Server Fault'
Hello; I have created a custom root certificate authority for an internal network, example.com. Ideally, I would like to be able to deploy the CA certificate associated with this certificate authority to my Linux clients (running Ubuntu 9.04 and CentOS 5.3), such that all of the applications automatically… >>> More
Understanding Security Certificates (and thier pricing)

as seen on Server Fault - Search for 'Server Fault'
I work at a very small company so certificate costs need to be absolutely minimal. However for some applications we do Need to have our customers get that warm fuzzy not-using-a-self-signed certificate feeling. Since creating a "certificate authority" with makecert really just means creating a public/private… >>> More
Install new root certificate authority (CA) in windows

as seen on Super User - Search for 'Super User'
I am trying to use ninite to get my new laptop set up quickly. However when I try to install, windows complains about the CA. The website ninite.com also shows certificate problems. They use a root CA (COMODO Certification Authority) that is not included into windows 7 by default. However I am not… >>> More
Validating SSL clients using a list of authorised certificates instead of a Certificate Authority

as seen on Server Fault - Search for 'Server Fault'
Is it possible to configure Apache (or any other SSL-aware server) to only accept connections from clients presenting a certificate from a pre-defined list? These certificates may be signed by any CA (and may be self-signed). A while back I tried to get client certificate validation working in the… >>> More