Windows error 0x80094012, -2146877422

Detailed Error Information

CERTSRV_E_TEMPLATE_DENIED[1]

MessageThe permissions on the certificate template do not allow the current user to enroll for this type of certificate.
Declared inwinerror.h

HRESULT analysis[2]

FlagsSeverityFailure
Reserved (R)false
OriginMicrosoft
NTSTATUSfalse
Reserved (X)false
FacilityCode9 (0x009)
NameFACILITY_SSPI[2][1]
DescriptionThe source of the error code is the Security API layer.[2][1]
Error Code16402 (0x4012)

Questions

3votes
1answer

Child domain new cert request - certificate template permissions do not allow current user to enroll 0x80094012

I have the following AD configuration: rootca (standalone not domain connected) * mydom.local * dc1.mydom.local * svr1.mydom.local * subca.mydom.local(enterprise subordinate CA) * other.mydom.local * dc1.other.mydom.local * svr1.other.mydom.local I can register webserver certificates OK for svr1.mydom.local, however I log into svr1.other.mydom.local with the child domain administrator and I get the following [...] read more
active-directory
ad-certificate-services
pki

Comments

Leave a comment

(plain text only)

Sources

  1. winerror.h from Windows SDK 10.0.14393.0
  2. https://msdn.microsoft.com/en-us/library/cc231198.aspx

User contributions licensed under CC BY-SA 3.0