Sunday 31 January 2016

UNable to submit CSR and get SSL Certificate from internal CA on windows server 2008 R2

Today i faced an issue, i tried to get certificate against my CSR which i had generated from my Exchange servers 2013 mailbox/cas server.
Now my steps was as below.
first i logged in to mailbox/cas server and from here i generate a CSR and copied that CSR to my CA server. i opened the CA's console and
right click on CA name select All task-->submit new request and select the CSR file.
but i got the below error.

The Request contains no certificate template information. 0x80094801 (-2146875391) Denied by policy Module 0x80094801, the request does not contain a certificate template extension or the certificate template request attribute.

Now i tried few times but no luck. then i tried to submit the request with command prompt.
so i went to the location where my CSR file was placed (C:\SSL).


C:\SSL>Certreq -submit -attrib "certificateTemplate:webserver" certreq.req

and here i was able to submit request and got the required certificate.