Friday 18 November 2016

FIX: The request does not contain a certificate template extension or the CertificateTemplate request attribute

Scenario:

You are trying to generate an SSL Certificate from your Enterprise CA using the MMC Snapin using a CSR File and you get the error:

—————————
Certificate Request Processor
—————————
The request contains no certificate template information. 0x80094801 (-2146875391)
Denied by Policy Module 0x80094801, The request does not contain a certificate template extension or the CertificateTemplate request attribute.
—————————
OK
—————————

Fix:

Generate your CSR file as usual from IIS Management Console on your Web Server.
NB - You will now need to make sure that the Encryption is at least 2048 when generating the CSR...

Copy this csr file to a folder on your Enterprise CA Folder like C:\CertReq\

Log onto your Enterprise CA with Domain Administrator Account and run a command prompt with Administrative Privileges and type the following command:

C:\>certreq -submit -attrib "CertificateTemplate:WebServer" "C:\CertReq\CSR_File.txt" and press enter...
 You will then be prompted with a dialogue box to choose your Enterprise CA...

 Once you have clicked OK you will be prompted to save the Certificate File, once this is done you should see something like the following:



Now this is done copy your Certificate file to the Web Server and Complete Certificate Request in the IIS Management Snapin...