What does HRESULT 0x80094012 (CERTSRV_E_TEMPLATE_DENIED) mean?

 
Previous Next
CERTSRV_E_ENROLL_DENIED CERTSRV_E_DOWNLEVEL_DC_SSL_OR_UPGRADE

CERTSRV_E_TEMPLATE_DENIED

CERTSRV_E_TEMPLATE_DENIED The requester is not authorized by the certificate template’s security descriptor to enroll for this template.

What to check

  • Open the template in Certificate Templates MMC and review Read, Enroll, and Autoenroll permissions for the requester’s effective groups.
  • Verify that the template is published on the issuing CA; permission alone does not make an unpublished template available.
  • Avoid granting Enroll broadly on templates that contain client-authentication, enrollment-agent, or other high-impact EKUs.

Microsoft: Manage certificate templates

Microsoft: Certificate template concepts

Microsoft: Certificate template troubleshooting


Looking for a different code? Search another status or error code.