Windows error 0x80094800, -2146875392

Detailed Error Information

CERTSRV_E_UNSUPPORTED_CERT_TYPE[1]

MessageThe requested certificate template is not supported by this CA.
Declared inwinerror.h

HRESULT analysis[2]

FlagsSeverityFailure
Reserved (R)false
OriginMicrosoft
NTSTATUSfalse
Reserved (X)false
FacilityCode9 (0x009)
NameFACILITY_SSPI[2][1]
DescriptionThe source of the error code is the Security API layer.[2][1]
Error Code18432 (0x4800)

Questions

4votes
2answers

The template parameter in InitializeFromPrivateKey() on CX509CertificateRequestPkcs10 object causes exception when trying a specific Template

I am having an issue with specifying the template parameter in InitializeFromPrivateKey() on the X509Enrollment.CX509CertificateRequestPkcs10 object. Anything other than a template of "User" is resulting in the following exception:- CertEnroll::CX509CertificateRequestPkcs10::InitializeFromPrivateKey: The requested certificate template is not supported by this CA. 0x80094800 (-2146875392) There is a specific Certificate template that I [...] read more
javascript
templates
certificate
certificate-authority
certenroll
3votes
2answers

Cannot issue Computer cert to standalone computer from my ECA

All Windows 2K8R2 SP1 environment. I have a working Enterprise Certificate Authority in my domain. I want to issue a Computer certificate (for Server Authentication purpose) to an external, stand-alone machine. So I add the Certification Authority Web Enrollment, Certificate Enrollment Web Service, and Certificate Enrollment Policy Web Service role [...] read more
windows-server-2008-r2
ssl-certificate
certificate
certificate-authority
ad-certificate-services
1vote
1answer

Windows Certificate Service Authority templates to issues

I have the problem that I cannot issue self-made certificate templates in the certificate authority, i.e. in the certificate authority, right click to certificate templates and select certificate template to issue. My templates do not appear. Situation (with some chronological changes): * 1 forest; 2 domains (A.local and B.local) * [...] read more
windows
certificate
templates
1vote
0answers

Issue certificate to IP address in AD CS

We're trying to get a Sophos XG 210 to connect via LDAPS to an Active Directory Domain Services (AD DS) / Domain Controller (DC) server but doing so fails with the following two errors: > Device - AD server connectivity test failed > > Connectivity to AD server %privateIPAddress% failed [...] read more
active-directory
ssl-certificate
ad-certificate-services
pki
1vote
1answer

Windows Server 2008 R2 CA not issuing more than 2 years

I have active directory environment in 2003 R2. I have installed 2008 R2 Enterprise Edition CA. Then I have created custom template from web server template and add expiry date as 15 years. my root certificate is valid for 25 years. Then I went to templates and and remove the [...] read more
windows-server-2008
windows-server-2003
active-directory
certificate-authority
0votes
2answers

Trouble with Subordinate CA - Unable to submit CSR

I have a Subordinate CA running on Windows 2016 Server - its been issuing certs until recently where I am now only ever getting the error when trying to submit a CSR: > The request contains no certificate template information. > 0x80094901 (-2146875391 CERTSRV_E_NO_CERT_TYPE) > Denied by Policy Module 0x90094801, [...] read more
certificate
windows-server-2016
csr
0votes
1answer

Unable to install NDES

I have enterprice CA running on a Windows 2008 box. I am trying to configure NDES on a windows server 2012 R2. I followed all the instructions word by word from this blog: http://windowsitpro.com/security/setting-network-device-enrollment-service but it fails with the following error: > Failed to install RA certificates. The requested certificate [...] read more
ad-certificate-services

Comments

Leave a comment

(plain text only)

Sources

  1. winerror.h from Windows SDK 10.0.14393.0
  2. https://msdn.microsoft.com/en-us/library/cc231198.aspx

User contributions licensed under CC BY-SA 3.0