When I create a duplicate certificate template (in order to increase validity period for activesync use), and select 2008 version I cannot enroll on behalf of users because it prompts me to insert a smart card to save the cert to...If I select version 2003, everything works fine.
steps used to create certificate template:
Duplicate "User" template, <Select version 2003, or 2008>, "this number of authorized signatures" = 1, Policyt type = Application Policy, Application Policy = "Certificate Request Agent"
Environment:
Windows 2008 R2 standard, Enterprise root CA using enterprise / domain admin account for enrollment agent
I'm fine with just using the 2003 version, but I don't like not understanding why something isn't working. Can anyone help shed some light here?
thanks,
Michael