I have an issue guys and I hope someone has a simple answer.
After all of my destruction of installing, configuring and deploying PKI. I have finally narrowed it down to one issue I’m having.
When I run the following command line, CertReq -new -f %certpath%\%input%.inf %certpath%\%input%.req . A popup box with the option to press OK or Cancel. If I press OK, my *.req file is created. If I try to use the -q, I receive an
error:
ConfigMgrWorkgroupClientCertificate
: The system cannot find the file specified. 0x80070002 (WIN32: 2)
The –q is shown on technet
http://technet.microsoft.com/library/cc725793.aspx
I also use CERTREQ in this command and I receive the same response. press OK or Cancel.
certreq -submit -f -Username abc\testuser1 -p P@ssw0rd -PolicyServer "https://lnyceppkis01.abc.com/KeyBasedRenewal_ADPolicyProvider_CEP_UsernamePassword/service.svc/CEP" -config "https://lnycespkis01.abc.com/IssuingCA-LNYSUBCAPKIS01_CES_UsernamePassword/service.svc/CES"
-attrib "ConfigMgrWorkgroupClientCertificate" %certpath%\%input%.req %certpath%\%input%.cer
Rem Change ConfigurationManagerClientTemplate below to the name of theCertificate Template you create HERE. Remember use theCert Name NOT theDisplay Name
echo;-----ConfigMgrWorkgroupClientCertificate.inf----->"%certpath%\%input%.inf"
echo[NewRequest] >>"%certpath%\%input%.inf"
echoSubject="cn=%input%" >>"%certpath%\%input%.inf"
echoKeyLength=2048 >>"%certpath%\%input%.inf"
echoExportable=TRUE >>"%certpath%\%input%.inf"
echoMachineKeySet=TRUE >>"%certpath%\%input%.inf"
echoKeySpec=1 ;key exchange >>"%certpath%\%input%.inf"
echoKeyUsage=0xA0 >>"%certpath%\%input%.inf"
echo[RequestAttributes] >>"%certpath%\%input%.inf"
echoCertificateTemplate=ConfigMgrWorkgroupClientCertificate>>"%certpath%\%input%.inf"
Rem Create the a binary request filefrom the INF
echoGenerating certificate request for server%input%
CertReq -new -f%certpath%\%input%.inf%certpath%\%input%.req