Home > ConfigMgr 2007 > After migrating your CA from 2008 standard to enterprise you still can not publish the SCCM custom certificates

After migrating your CA from 2008 standard to enterprise you still can not publish the SCCM custom certificates

I ran into an issue where a client had an existing CA deployed on a Standard 2008 Server. The client is adding SCCM in Native Mode to their environment. With SCCM native mode, you need to issue customized certificates, which can only be accomplished with an Enterprise server.

The client needs to keep the existing server without losing any functionality or migrating to a new server. Windows 2008 supports an upgrade from standard to enterprise. The upgrade completed however after upgrading from standard to enterprise and creating my custom certificates needed for SCCM native mode, I still could not issue the custom certificates. Here is why.

ISSUE

The issue is related to “Flags” attribute on pkiEnrollmentservice

RESOLUTION

Open ADSI Edit. Right click the default naming context in ADSI edit and choose settings. You will see the following connection properties dialog box.

Change “Select a well known Naming Context:” to configuration

Click ok

Scroll down and look at the flags attribute.

Note:

The Flags attribute needs to be configured for the Type and OS version of
the CA. Here are the different valid flags settings…

Enterprise CA running on Standard Edition of the Operating System: 2
Enterprise CA running on Enterprise Edition of the Operating System: 10
Standalone CA running on Standard Edition of the Operating System: 5
Standalone CA running on Enterprise Edition of the Operating System: 9

The valid Flags attribute setting for an Enterprise CA running on Enterprise
Edition of the Operating System needs to be equal to 10.

In my case the Flags attribute was set to 2. I changed it to 10.

After you change the attribute, Restart the Cert Services… you will now be able to certificate templates now

Categories: ConfigMgr 2007
  1. Les
    March 7, 2013 at 7:48 am

    Hey There. I found your weblog the usage of msn.

    That is a really well written article. I will be sure to bookmark it and return to learn
    extra of your useful information. Thanks for the post. I will definitely comeback.

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: