Certificate for non-windows machines

I am trying to generate certificates for some apache servers running on linux.
After the OpenSSL request generation, when I attempt to validate the
certificate in the CA tool, it complains saying that it failed because the
certificate doesn't have a template.

How do I fix this? Or, how do you sign certificates made on non-windows
machines?

David
Wed Nov 10 07:05:56 CST 2004

This whitepaper may help you to submit requests from non windows machines:


advanced certificate enrollment:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/advcert.mspx


--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

"Andy" <Andy@discussions.microsoft.com> wrote in message
news:8DC05072-97FA-400E-921D-EFE1C1958158@microsoft.com...
>I am trying to generate certificates for some apache servers running on
>linux.
> After the OpenSSL request generation, when I attempt to validate the
> certificate in the CA tool, it complains saying that it failed because the
> certificate doesn't have a template.
>
> How do I fix this? Or, how do you sign certificates made on non-windows
> machines?

Andy
Tue Nov 16 02:44:04 CST 2004

How about if I already have a .csr file (this is from openssl):
The file looks like this:

-----BEGIN CERTIFICATE REQUEST-----
a bunch of lovely base64 ciphertext.
-----END CERTIFICATE REQUEST-----

Is there an easier way than using certreq?
"David Cross [MS]" wrote:

> This whitepaper may help you to submit requests from non windows machines:
>
>
> advanced certificate enrollment:
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/advcert.mspx
>
>
> --
>
>
> David B. Cross [MS]
>
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> http://support.microsoft.com
>
> "Andy" <Andy@discussions.microsoft.com> wrote in message
> news:8DC05072-97FA-400E-921D-EFE1C1958158@microsoft.com...
> >I am trying to generate certificates for some apache servers running on
> >linux.
> > After the OpenSSL request generation, when I attempt to validate the
> > certificate in the CA tool, it complains saying that it failed because the
> > certificate doesn't have a template.
> >
> > How do I fix this? Or, how do you sign certificates made on non-windows
> > machines?
>
>
>

David
Tue Nov 16 07:24:50 CST 2004

You can submit the request using certreq.exe or you can use the web
enrollment pages from the windows certificate server to cut and paste the
submisison and response.

--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

"Andy" <Andy@discussions.microsoft.com> wrote in message
news:E96EBBEC-B922-4D9C-8F45-51517498B2BD@microsoft.com...
> How about if I already have a .csr file (this is from openssl):
> The file looks like this:
>
> -----BEGIN CERTIFICATE REQUEST-----
> a bunch of lovely base64 ciphertext.
> -----END CERTIFICATE REQUEST-----
>
> Is there an easier way than using certreq?
> "David Cross [MS]" wrote:
>
>> This whitepaper may help you to submit requests from non windows
>> machines:
>>
>>
>> advanced certificate enrollment:
>> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/advcert.mspx
>>
>>
>> --
>>
>>
>> David B. Cross [MS]
>>
>> --
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> http://support.microsoft.com
>>
>> "Andy" <Andy@discussions.microsoft.com> wrote in message
>> news:8DC05072-97FA-400E-921D-EFE1C1958158@microsoft.com...
>> >I am trying to generate certificates for some apache servers running on
>> >linux.
>> > After the OpenSSL request generation, when I attempt to validate the
>> > certificate in the CA tool, it complains saying that it failed because
>> > the
>> > certificate doesn't have a template.
>> >
>> > How do I fix this? Or, how do you sign certificates made on
>> > non-windows
>> > machines?
>>
>>
>>

Andy
Thu Nov 18 01:27:02 CST 2004

Here's what I get:

>certreq
RequestId: 4
Certificate not issued (Denied) Denied by Policy Module 0x80094801, The
request
does not contain a certificate template extension or the
CertificateTemplate re
quest attribute.
The request contains no certificate template information. 0x80094801
(-21468753
91)

What's this mean?

"Andy" wrote:

> How about if I already have a .csr file (this is from openssl):
> The file looks like this:
>
> -----BEGIN CERTIFICATE REQUEST-----
> a bunch of lovely base64 ciphertext.
> -----END CERTIFICATE REQUEST-----
>
> Is there an easier way than using certreq?
> "David Cross [MS]" wrote:
>
> > This whitepaper may help you to submit requests from non windows machines:
> >
> >
> > advanced certificate enrollment:
> > http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/advcert.mspx
> >
> >
> > --
> >
> >
> > David B. Cross [MS]
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no rights.
> >
> > http://support.microsoft.com
> >
> > "Andy" <Andy@discussions.microsoft.com> wrote in message
> > news:8DC05072-97FA-400E-921D-EFE1C1958158@microsoft.com...
> > >I am trying to generate certificates for some apache servers running on
> > >linux.
> > > After the OpenSSL request generation, when I attempt to validate the
> > > certificate in the CA tool, it complains saying that it failed because the
> > > certificate doesn't have a template.
> > >
> > > How do I fix this? Or, how do you sign certificates made on non-windows
> > > machines?
> >
> >
> >