Certificate Authority does not show Templates











up vote
3
down vote

favorite












No templates are shown in the Template folder of the Certificate Authority.



In the Certificate Templates (certtmpl.msc) are Templates shown.



Running certutil -CATemplates returns 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND) CertUtil: Element not found.



Restarting the service did not help



Sreenshot of CN=OID shows the following result



enter image description here



There are also no entries under CN:Enrollment Services



enter image description here










share|improve this question
























  • Does CN=OID container has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) under CN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext} container.
    – Crypt32
    2 days ago












  • See update in question
    – Mister 832
    2 days ago















up vote
3
down vote

favorite












No templates are shown in the Template folder of the Certificate Authority.



In the Certificate Templates (certtmpl.msc) are Templates shown.



Running certutil -CATemplates returns 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND) CertUtil: Element not found.



Restarting the service did not help



Sreenshot of CN=OID shows the following result



enter image description here



There are also no entries under CN:Enrollment Services



enter image description here










share|improve this question
























  • Does CN=OID container has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) under CN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext} container.
    – Crypt32
    2 days ago












  • See update in question
    – Mister 832
    2 days ago













up vote
3
down vote

favorite









up vote
3
down vote

favorite











No templates are shown in the Template folder of the Certificate Authority.



In the Certificate Templates (certtmpl.msc) are Templates shown.



Running certutil -CATemplates returns 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND) CertUtil: Element not found.



Restarting the service did not help



Sreenshot of CN=OID shows the following result



enter image description here



There are also no entries under CN:Enrollment Services



enter image description here










share|improve this question















No templates are shown in the Template folder of the Certificate Authority.



In the Certificate Templates (certtmpl.msc) are Templates shown.



Running certutil -CATemplates returns 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND) CertUtil: Element not found.



Restarting the service did not help



Sreenshot of CN=OID shows the following result



enter image description here



There are also no entries under CN:Enrollment Services



enter image description here







windows-server-2012-r2 certificate-authority






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited yesterday

























asked 2 days ago









Mister 832

1236




1236












  • Does CN=OID container has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) under CN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext} container.
    – Crypt32
    2 days ago












  • See update in question
    – Mister 832
    2 days ago


















  • Does CN=OID container has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) under CN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext} container.
    – Crypt32
    2 days ago












  • See update in question
    – Mister 832
    2 days ago
















Does CN=OID container has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) under CN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext} container.
– Crypt32
2 days ago






Does CN=OID container has entries in Active Directory? You can view them in ADSI Edit (adsiedit.msc) under CN=OID, CN=Public Key Services, CN=Services,{configurationNamingContext} container.
– Crypt32
2 days ago














See update in question
– Mister 832
2 days ago




See update in question
– Mister 832
2 days ago










1 Answer
1






active

oldest

votes

















up vote
4
down vote













It looks like that your templates are ok and OIDs are ok as well.



Try to restart certificate service (certsvc) on new CA and check if templates are loaded. If this doesn't help, then stop certsvc on CA, then remove templates in CA record under CN=Enrollment Services, CN=Public Key Services, CN=Services,{configurationNamingContext}. Open CA record, navigate to certificateTemplates attribute:




  1. record a list of certificate templates you see them (just write somewhere).

  2. clear list by removing all entries from this attribute.

  3. Open Certification Authority MMC snap-in (certsrv.msc), start certsvc and try to add templates manually from the record you made in step 1.






share|improve this answer





















  • Sorry, but does new CA mean, I should reinstall the certificate Authority?
    – Mister 832
    yesterday










  • Where did I say about new CA?
    – Crypt32
    yesterday










  • Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
    – Mister 832
    yesterday










  • I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
    – Mister 832
    yesterday












  • You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record in Enrollment Services container. I didn't say anything about Certificate Templates DS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
    – Crypt32
    yesterday











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














 

draft saved


draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f940508%2fcertificate-authority-does-not-show-templates%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes








up vote
4
down vote













It looks like that your templates are ok and OIDs are ok as well.



Try to restart certificate service (certsvc) on new CA and check if templates are loaded. If this doesn't help, then stop certsvc on CA, then remove templates in CA record under CN=Enrollment Services, CN=Public Key Services, CN=Services,{configurationNamingContext}. Open CA record, navigate to certificateTemplates attribute:




  1. record a list of certificate templates you see them (just write somewhere).

  2. clear list by removing all entries from this attribute.

  3. Open Certification Authority MMC snap-in (certsrv.msc), start certsvc and try to add templates manually from the record you made in step 1.






share|improve this answer





















  • Sorry, but does new CA mean, I should reinstall the certificate Authority?
    – Mister 832
    yesterday










  • Where did I say about new CA?
    – Crypt32
    yesterday










  • Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
    – Mister 832
    yesterday










  • I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
    – Mister 832
    yesterday












  • You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record in Enrollment Services container. I didn't say anything about Certificate Templates DS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
    – Crypt32
    yesterday















up vote
4
down vote













It looks like that your templates are ok and OIDs are ok as well.



Try to restart certificate service (certsvc) on new CA and check if templates are loaded. If this doesn't help, then stop certsvc on CA, then remove templates in CA record under CN=Enrollment Services, CN=Public Key Services, CN=Services,{configurationNamingContext}. Open CA record, navigate to certificateTemplates attribute:




  1. record a list of certificate templates you see them (just write somewhere).

  2. clear list by removing all entries from this attribute.

  3. Open Certification Authority MMC snap-in (certsrv.msc), start certsvc and try to add templates manually from the record you made in step 1.






share|improve this answer





















  • Sorry, but does new CA mean, I should reinstall the certificate Authority?
    – Mister 832
    yesterday










  • Where did I say about new CA?
    – Crypt32
    yesterday










  • Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
    – Mister 832
    yesterday










  • I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
    – Mister 832
    yesterday












  • You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record in Enrollment Services container. I didn't say anything about Certificate Templates DS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
    – Crypt32
    yesterday













up vote
4
down vote










up vote
4
down vote









It looks like that your templates are ok and OIDs are ok as well.



Try to restart certificate service (certsvc) on new CA and check if templates are loaded. If this doesn't help, then stop certsvc on CA, then remove templates in CA record under CN=Enrollment Services, CN=Public Key Services, CN=Services,{configurationNamingContext}. Open CA record, navigate to certificateTemplates attribute:




  1. record a list of certificate templates you see them (just write somewhere).

  2. clear list by removing all entries from this attribute.

  3. Open Certification Authority MMC snap-in (certsrv.msc), start certsvc and try to add templates manually from the record you made in step 1.






share|improve this answer












It looks like that your templates are ok and OIDs are ok as well.



Try to restart certificate service (certsvc) on new CA and check if templates are loaded. If this doesn't help, then stop certsvc on CA, then remove templates in CA record under CN=Enrollment Services, CN=Public Key Services, CN=Services,{configurationNamingContext}. Open CA record, navigate to certificateTemplates attribute:




  1. record a list of certificate templates you see them (just write somewhere).

  2. clear list by removing all entries from this attribute.

  3. Open Certification Authority MMC snap-in (certsrv.msc), start certsvc and try to add templates manually from the record you made in step 1.







share|improve this answer












share|improve this answer



share|improve this answer










answered 2 days ago









Crypt32

3,203923




3,203923












  • Sorry, but does new CA mean, I should reinstall the certificate Authority?
    – Mister 832
    yesterday










  • Where did I say about new CA?
    – Crypt32
    yesterday










  • Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
    – Mister 832
    yesterday










  • I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
    – Mister 832
    yesterday












  • You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record in Enrollment Services container. I didn't say anything about Certificate Templates DS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
    – Crypt32
    yesterday


















  • Sorry, but does new CA mean, I should reinstall the certificate Authority?
    – Mister 832
    yesterday










  • Where did I say about new CA?
    – Crypt32
    yesterday










  • Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
    – Mister 832
    yesterday










  • I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
    – Mister 832
    yesterday












  • You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record in Enrollment Services container. I didn't say anything about Certificate Templates DS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
    – Crypt32
    yesterday
















Sorry, but does new CA mean, I should reinstall the certificate Authority?
– Mister 832
yesterday




Sorry, but does new CA mean, I should reinstall the certificate Authority?
– Mister 832
yesterday












Where did I say about new CA?
– Crypt32
yesterday




Where did I say about new CA?
– Crypt32
yesterday












Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
– Mister 832
yesterday




Sorry, I misread it. Well, stopping an restarting certsvc did not help. BTW: Thank you for your good answer!
– Mister 832
yesterday












I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
– Mister 832
yesterday






I've deleted the objects under CN=Certificate Templates. After that, when I select Templates in CA, I asked if I wanted to reinstall the templates, since none where found. However, after that, the CA Templates did still not appear. If I right-click on Template-->New, the option template is disabled.So, I've created one pKICertifacte in ADSI-Editor. Restarted the service, but the result was still the same. The Template does not show up
– Mister 832
yesterday














You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record in Enrollment Services container. I didn't say anything about Certificate Templates DS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
– Crypt32
yesterday




You did everything wrong. I asked to delete a list of certificate templates from attribute ander CA record in Enrollment Services container. I didn't say anything about Certificate Templates DS container. Also, I didn't ask to restore the list of templates in ADSI Editor, I asked to do this from Certification Authority MMC snap-in.
– Crypt32
yesterday


















 

draft saved


draft discarded



















































 


draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f940508%2fcertificate-authority-does-not-show-templates%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Bundesstraße 106

Le Mesnil-Réaume

Ida-Boy-Ed-Garten