Certificate not issued (Denied) Denied by Policy Module 0x80094800. The request was for a certificate template that is not supported by the Active Directory Certificate Services policy.

Posted by

Last week, I was getting a Web server certificate in our PKI environment for our new WSUS deployment. When submitting my csr file with the web server template, I faced some dumb error which has cost me some hours. So maby i can short your troubleshooting with this write.

My faulty command:

The fault: you must use the CN of the template (no space name) rather than the Display Name (with spaces).
Working command:

4 comments

  1. thanks! we were going round and round with the same error. We thought it was due to the CA computer account not having read access to the specific template (as suggested by numerous other sites), but Auth Users was listed with Read access. We couldn’t figure out why we couldn’t enroll for a cert. This tip resolved it and probably saved us hours of troubleshooting!

  2. Thank you! had this problem, spent a couple of hours troubleshooting and searching online with no solution and was getting really frustrated. Finally stumble on this page and of course it was the right answer. Big relief.

Leave a Reply

Your email address will not be published.