Good day!
Deploy the new (first) Enterprise Root CA in our domain was completed successfully, but whit a warning - unable to upload the default certificate templates. Wizard advised to check the rights for AD "Certificate Templates" container and run the
command "certutil -installdefaulttemplates". Nothing unusual in the rights to the container I have not seen (I compared with other domains where the CA to work correctly).
The command produces the following result:
>certutil -installdefaulttemplates
CertUtil: -InstallDefaultTemplates command FAILED: 0x8007051b (WIN32: 1307)
CertUtil: This security ID may not be assigned as the owner of this object.
We have Windows Server 2008 R2 AD. Command is run from account whit Domain Admins and Enterprise Admins rights.
Please tell me what could be the cause of this error?