Can someone please help me with the following issue.
I believe I may have a handle on the cause of the issue but not 100% sure and therefore would value some advice please.
I have a single Active Directory domain with domain joined Microsoft Certificate Services. I have two CA’s lets called them” ROOT-CA” and “Subordinate-CA”
Now ROOT-CA is running Windows Server Enterprise Edition and Subordinate-CA is running Windows Sever Standard Edition (and I think this is where the problem may lay, e.g. version of Windows OS) .
Now I can issue certificates from both CA’s no problem, the problem comes when I am creating a new certificate template and then trying to issue this certificate template.
So for example if I create a new certificate template by coping one of the standard certificate templates and adjusting slightly for my needs (e.g. standard practice, by the way I did this on the Subordinate-CA Server). I publish the new certificate template to active directory and shortly after this, from the ROOT-CA Server I can open the certificate authority MMC snap in go to certificate templates > new > certificate template to issue. There I will see the new certificate template I created. However if I do the same from the Subordinate-CA (e.g. Windows Standard Edition Server where I created the template) I do not see it listed in the list of available templates to issue, all I see if the standard list of templates.
I then opened ADSI Edit to check the new template was present in AD on both Servers e.g. I checked
CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,DC=ForestRootDomain
The template was present on both Servers therefore I know it has synced in AD OK.
Therefore I am thinking is it because I have Windows Server “Standard” Edition and not “Enterprise” edition on this Subordinate-CA which means I cannot see these newly created and published templates, or does this not matter?
Thanks All
AanotherUser__
AAnotherUser__