You have an enterprise subordinate certification authority (CA).
You have a custom Version 3 certificate template.
Users can enroll for certificates based on the custom certificate template by using the Certificates console. The
certificate template is unavailable for Web enrollment.
You need to ensure that the certificate template isavailable on the Web enrollment pages.
What should you do?
A.
Run certutil.exe pulse.
B.
Run certutil.exe installcert.
C.
Change the certificate template to a Version 2 certificate template.
D.
On the certificate template, assign the Autoenroll permission to the users.
Explanation:
Identical to F/Q33.
Reference 1:
http://technet.microsoft.com/en-us/library/cc732517.aspx
Certificate Web enrollment cannot be used with version 3 certificate templates.
Reference 2:
http://blogs.technet.com/b/ad/archive/2008/06/30/2008-web-enrollment-and-version-3-templates.aspx
The reason for this blog post is that one of our customers called after noticing some unexpected behavior when
they were trying to use the Server 2008 certificateweb enrollment page to request a Version 3 Template based
certificate. The problem was that no matter what they did theVersion 3 Templates would not appearas
certificates which could be requested via the web page. On the other hand, version 1 and 2 templates did
appearin the page and requests could be done successfully using those templates.