Error: "Certificate Authority returned Request denied, the CSR submission failed." is displayed during a MSCA certificate renewal

Applies to:

Venafi Encryption Director 6.1



When renewing certificates through a Microsoft Certificate Authority the following error occurs:

Certificate Authority returned Request denied, the CSR submission failed.




The Microsoft Certificate Authority and/or the template has not been granted enough rights to successfully fill the Director certificate request.


  1. Access the server running the Microsoft CA.
  2. Open up the management Console for the CA.
  3. Right click on the Certificate Authority -> Properties -> Security Tab and check that the user you have specified is the same user used during the Certificate Authority portion of Director's install


    Note: If the user used has been forgotten, go to Start -> Administrative Tools -> Component Services to find out the user that was provided


  4. Now right click on Certificate Templates -> Manage and then right click on the template that was chosen  during the creation of the CA template in Director and select Properties -> Security. Make sure the the user listed here is the same user with sufficient rights found in step #3 above.


The renewal of the certificate should now be successful.

Was this article helpful?
1 out of 1 found this helpful