I figure this is all I should need to do as my organization does not use issuance policies or anything. However, when I try to enroll a cert on behalf of a user, the template does not show up. When the "Show all templates" box is checked, the template appears with the following error message: "The requested property value is empty. You do not have permission to view this type of certificate."
I have looked through the Microsoft libraries and googled for information on this error, however it does not appear to be well-documented. Any input would be greatly appreciated. Thank you!
asked Oct 8, 2010 at 16:30 nedwards86 nedwards86 53 1 1 gold badge 1 1 silver badge 7 7 bronze badgesI managed to figure it out! Because my company does not use issuance policies, there was nothing for the certificate to resolve to. So, to fix this, I changed the template from using issuance policies to using application policies.
To do this, open the properties of the certificate template.
Click the "Issuance Requirements" tab.
In the "Policy type required in signature:" dropdown, select "Application policy".
Next, in the "Application policy:" dropdown, select "Certificate Request Agent". This gives you the permissions to use that template.
Simply import the template onto the CA and you're done.