Follow

Error: "Certificate Authority returned Request denied, the CSR submission failed." is displayed during a MSCA certificate renewal

Applies to:

Venafi Encryption Director 6.1

 

Symptom: 

When renewing certificates through a Microsoft Certificate Authority the following error occurs:

Certificate Authority returned Request denied, the CSR submission failed.

 

Screen_Shot_2012-11-19_at_3.44.26_PM.png

Cause:

The Microsoft Certificate Authority and/or the template has not been granted enough rights to successfully fill the Director certificate request.

Resolution:

  1. Access the server running the Microsoft CA.
  2. Open up the management Console for the CA.
  3. Right click on the Certificate Authority -> Properties -> Security Tab and check that the user you have specified is the same user used during the Certificate Authority portion of Director's install

    Screen_Shot_2012-11-19_at_4.40.49_PM.png

    Note: If the user used has been forgotten, go to Start -> Administrative Tools -> Component Services to find out the user that was provided


    Screen_Shot_2012-11-19_at_4.45.36_PM.png


  4. Now right click on Certificate Templates -> Manage and then right click on the template that was chosen  during the creation of the CA template in Director and select Properties -> Security. Make sure the the user listed here is the same user with sufficient rights found in step #3 above.

    Screen_Shot_2012-11-19_at_4.51.35_PM.png

The renewal of the certificate should now be successful.

Was this article helpful?
1 out of 1 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk