windows - no certificate available when enrolling on behalf -


i have 1 winserver 2008 domain controller , ca server on it. log in administrator account , want request certificate "on behalf" of user of dc.

for doing that, @ first duplicated these certificate templates:

  • smart login
  • smart user
  • enrolment agent

i changed configuration , permission new templates administrator account can read, write , enrol these templates.

after creating these new templates , assigning permissions , configuration, mmc , certificate snap-in, user account certificates, , "personal" section, requested new certificate administrator account make enrollment agent shown below:

image

then generated no problem , want request certificate on behalf of user new certificate. but, in "select enrolment agent certificate" , when click on "browse" button, have problem because there no certificate select, shown below:

there no certificate available choose image

i read lot of documents online did not find reason solve problem!

i have same problem (cannot choose existing enrollment cert).

the solution (maybe):

check access published crl and/or refresh crl cache on enrollment workstation.

from elevated command line:

  1. delete old cache: certutil -urlcache crl delete
  2. resync crl cache: certutil -setreg chain\chaincacheresyncfiletime @now

Comments

Popular posts from this blog

html - How to set bootstrap input responsive width? -

javascript - Highchart x and y axes data from json -

javascript - Get js console.log as python variable in QWebView pyqt -