Hi All,
I'm having an issue with our Enterprise Certificate Authority and allowing computers to request a certificate via the Certificates MMC. I'm testing currently trying to test this certificate enrollment configuration with two machines in their own OU in AD (to minimize any GP related variables). In terms of auto enrollment in group policy, I created a GPO that enabled certificate services client - auto enrollment and certificate enrollment policy for the OU my two machines are in to allow this to work (this seems to be working as any other computer on the network claims auto-enrollment isn't available).
Right now, if I open an MMC with the certificates snap-in on the local computer of one of the test machines, right click on certificates > All Tasks > Automatically Enroll... I get the standard "Before you Begin" screen. I then click Next and then I get the screen where it says "Certificate types are not available" (sorry, I cannot post screenshots at this time). If I click the "Show all templates" checkbox, I can see all of my templates (including the computer template I created) but they don't actually show up as available.
I'm completely baffled on my next steps. It has to be something simple (I'm new to AD CA's). Just wondering if anyone had any ideas on how I make the cert available to select? Seems like a security issue but I'm not sure.
The goal is is permit for use in an 802.1x authentication scenario for wireless (no wireless is involved at the moment, just want to test the cert enrollment at the moment).
Thanks!
Nick