Problems with CA templates
I am trying in a testlab to make NAP work throug IPsec enforcement.For this testlab i am using the following guide from Microsoft.Guide to deploy NAP through IPsec EnforcementIn the guide they are using a server 2003 CAIn my test lab this server is replaced by a Server 2008 CABut I am having a problem with the CA templates,The guide tels me to create a new template as you can see:
To configure a certificate template
1. Click Start, click Run, type certtmpl.msc, and then press ENTER.
2. In the details pane, right-click Workstation Authentication, and then click Duplicate Template. This template is used because it is already configured with the client authentication application policy.
3. Under Template display name, type System Health Authentication.
4. Select the Publish certificate in Active Directory check box. See the following example.
5. Click the Extensions tab, and then click Application Policies.
6. Click Edit, click Add, and then click New.
7. In the New Application Policy dialog box, under Name, type System Health Authentication, and under Object identifier, type 1.3.6.1.4.1.311.47.1.1. See the following example.
8. Click OK three times, and then click the Security tab.
9. Click Add, type IPsec NAP Exemption, and then click OK.
10. Click IPsec NAP Exemption, and then click the Allow check boxes next to Enroll and Autoenroll.
11. Click OK.
12. Close the certificate templates console.The above steps work just fine, but then you have to publish the template en that's where it all starts to go wrong
Publish certificate templates
Use the following procedure to allow the CA to issue the new health certificate template.
To publish certificate templates
1. Click Start, click Run, type certsrv.msc, and then press ENTER.
2. Open Root CA, and in the console tree, right-click Certificate Templates, point to New, and then click Certificate Template to Issue.
3. Click System Health Authentication, and then click OK.
4. In the console tree, click Certificate Templates, and in the details pane under Name, verify that System Health Authentication is displayed.
5. Close the Certification Authority console.
So in this guide the are saying that when you click new then click Certificate Template to issue And than you are supossed to click System Health Authentication. But the template for the SHA isn't showing up in the list :-s.Does anyone have any idea how I can fix this problem?Thanks
March 27th, 2009 1:56pm
Ok, I think I found the solution...I was using a standard edition... http://social.technet.microsoft.com/Forums/en-US/winserverNAP/thread/bdbf7c9d-4e16-4d52-8fcb-c38de430ced9/
Free Windows Admin Tool Kit Click here and download it now
March 31st, 2009 9:22pm