Usually the issue is one or a combination of the following things below:<\/p>\n
1) In certificate template Subject tab wasn’t switched to Supply in request.<\/p>\n
2) The enrollment permissions on the certificate are incorrect.<\/p>\n
3) The Template was created for a 2008 R2 CA, but the forest level is still on 2003. A 2008 Cert Template can only be selected if the CA is on a 2008 R2 Server, AND the forest level is at 2008 R2.<\/p>\n
4) IE was not opened with elevated creds, even if logged in as a domain admin account, right click IE > run as Admin.<\/p>\n
5) Last but not least, You have to add the template to the CA to allow it to be issued.
\nOpen Certification Authority MMC snap-in, select Certificate Templates node. In the Action menu, select New and Certificate Template To Issue.<\/p>\n
Enjoy signing certificates on your enterprise CA!<\/p>\n
Jan 2018 Update<\/strong><\/em><\/p>\n Even I’m not sure what the heck this post was about, but if my memory serves me correctly, it’s when you attempt to use a particular Certificate template in either the MMC snap-in or the CA’s web portal and find the certificate is not available from the drop down menu to be selected.<\/p>\n Kinda wish i would have referenced some of these claims, but I’ll take my own word for it. Haha \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":" Usually the issue is one or a combination of the following things below: 1) In certificate template Subject tab wasn’t switched to Supply in request. 2) The enrollment permissions on the certificate are incorrect. 3) The Template was created for a 2008 R2 CA, but the forest level is still on 2003. A 2008 Cert … <\/p>\n