Last week, I was getting a Web server certificate in our PKI environment for our new WSUS deployment. When submitting my csr file with the web server template, I faced some dumb error which has cost me some hours. So maby i can short your troubleshooting with this write.
My faulty command:
1 |
certreq -submit -attrib "CertificateTemplate:Web Server V2" certreq_new_wsus.csr |
The fault: you must use the CN of the template (no space name) rather than the Display Name (with spaces).
Working command:
1 |
certreq -submit -attrib "CertificateTemplate:WebServerV2" certreq_new_wsus.csr |