What does HRESULT 0x80094011 (CERTSRV_E_ENROLL_DENIED) mean?

 
Previous Next
CERTSRV_E_ALIGNMENT_FAULT CERTSRV_E_TEMPLATE_DENIED

CERTSRV_E_ENROLL_DENIED

CERTSRV_E_ENROLL_DENIED The current user or computer does not have permission to enroll with this Certification Authority, regardless of whether a certificate template might otherwise be available.

What to check

  • Check the CA Security tab for Request Certificates or equivalent enrollment permissions for the requesting identity or group.
  • Check the template Security tab separately; CA-level and template-level permissions must both permit the request.
  • Grant only the necessary Enroll or Autoenroll rights to a tightly scoped group, then test with a non-administrative account.

Microsoft: Manage certificate templates

Microsoft: Certificate template concepts

Microsoft: Certificate template troubleshooting


Looking for a different code? Search another status or error code.