Certificate Templates

By dirv9 ·
Hi! I'm setting up a lab in Deploying Virtual Private Networks with Microsoft Windows Server 2003. I've just completed some remote access policies and enabled auto-enrollment in active directory, and used gpupdate. The next step is to configure certificate templates. I go to run, type in certtmpl.msc, and receive a message:
Windows could not create the object identifier list. The computer is not joined to a domain. Certificate templates are not available.
The computer is joined to a domain---I pinged the DC, and the Enterprise Root CA is on server 2003 enterprise. I can type in, on the DC, the url---, and I immediately go to CA3 for the welcome page for certificate enrollment. I googled to try to solve this, and the only thing I could find is something about if the templates were accidentally deleted. It says they should be seen in AD Sites and Services, which they're not. It says if they have disappeared, to type at a command prompt, with enterprise admin credentials:
regsvr32 /i:i /n certcli.dll
which I did and received confirmation that it was successful. However, no templates. Same message when using the run command again. How do I get the templates? Where did they go, and why? Any and all responses will be greatly appreciated. Thanks.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -


by dirv9 In reply to Certificate Templates

Figured it out. Just as you have to be a member of the enterprise admins as well as domain admins to install an enterprise root ca, you need the same credentials to run it. I logged in with the enterprise account, and all the templates appeared.

Related Discussions

Related Forums