An online certification authority cannot select.

Question

I am trying to create a domain server, and when I get to point to an online certificate authority, the select button is not available. I want to select the same computer as its certification authority. Any help is appreciated.

Answer 1

See this page: http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/e3e43894-30d5-4064-93d1-96d46ef3de14/

The answer from this thread is:

Please note that you can only register certificates from IIS only from the default V1 WebServer template. This template must be added to your CA server.

Answer 2

I had the same problem and the answer was "V1 WebServer template. This template must be added to your CA server." not allowed. But after running the command on the command line:

certreq -submit -attrib "CertificateTemplate:WebServer" request.req 

My request was a process, and my certificate was issued to me. In addition, I got a “Select” button that works great.

Answer 3

Another way to solve this problem: https://www.experts-exchange.com/questions/27758425/Windows-2008R2-IIS-7-Domain-Certficate-problem-select-button-is-greyed-out.html

You can try to register the certificate through MMC certificates, take a picture instead and see if you have more luck:

Start → Run → type 'mmc' → Press enter

(MMC should open)

File → Add / Remove Snap-in → Choose “Certificates” → Add → Computer Account → Local Computer → Click “OK” from the “Add / Remove Snap-in" window.

Expand certificates → Expand personal → Right-click in an empty space in the main panel → All tasks → Request a new certificate.

You should be able to run this wizard and register based on your CA. All certificates that you register here that are applicable to protect websites will be displayed in IIS.

Answer 4

Some more checks for those who are facing this problem:

• Use domain user, not local user
• Check if your CA is CA