Error: "Certificate Authority returned Request denied, the CSR submission failed." is displayed during a MSCA certificate renewal

Applies to:

Venafi Encryption Director 6.1

Symptom: 

When renewing certificates through a Microsoft Certificate Authority the following error occurs:

Certificate Authority returned Request denied, the CSR submission failed.

Cause:

The Microsoft Certificate Authority and/or the template has not been granted enough rights to successfully fill the Director certificate request.

Resolution:

1. Access the server running the Microsoft CA.
2. Open up the management Console for the CA.
3. Right click on the Certificate Authority -> Properties -> Security Tab and check that the user you have specified is the same user used during the Certificate Authority portion of Director's install
   
   
   
   Note: If the user used has been forgotten, go to Start -> Administrative Tools -> Component Services to find out the user that was provided
   
   
   
   
   
   
4. Now right click on Certificate Templates -> Manage and then right click on the template that was chosen  during the creation of the CA template in Director and select Properties -> Security. Make sure the the user listed here is the same user with sufficient rights found in step #3 above.
   
   
   
   

The renewal of the certificate should now be successful.