I have an Windows 2003 Enterprise CA setup to auto-enroll domain computers
with a machine certificate for the purpose of L2TP VPN.  This works great.
The problem is getting a machine certificate for non-domain computers.  When
going to enroll for a certificate via web http://servername/certsrv the only
drop down choices are "Basic EFS" and "User".  Neither certificate is valid.
How do I add certificates to the web enrollment page?  I need to add a
machine certificate with Client Authentication.

Thank you so much for any help,
Brian Monroe

[ Post a follow-up to this message ]

This is the answer:
http://support.microsoft.com/defaul...b;en-us;M555281

From Certificate Services you need to duplicate the IPSec (Offline Request)
template.  Set the permissions correctly and it will show up on the web
enrollment page.

-B


"bkmonroe" wrote:

> I have an Windows 2003 Enterprise CA setup to auto-enroll domain computers
> with a machine certificate for the purpose of L2TP VPN.  This works great.
> The problem is getting a machine certificate for non-domain computers.  Wh
en
> going to enroll for a certificate via web http://servername/certsrv the on
ly
> drop down choices are "Basic EFS" and "User".  Neither certificate is vali
d.
> How do I add certificates to the web enrollment page?  I need to add a
> machine certificate with Client Authentication.
>
> Thank you so much for any help,
> Brian Monroe
>

[ Post a follow-up to this message ]