What does HRESULT 0x8009480C (CERTSRV_E_ISSUANCE_POLICY_REQUIRED) mean?

 
Previous Next
CERTSRV_E_SIGNATURE_REJECTED CERTSRV_E_SUBJECT_UPN_REQUIRED

CERTSRV_E_ISSUANCE_POLICY_REQUIRED

CERTSRV_E_ISSUANCE_POLICY_REQUIRED The request lacks one or more issuance policies that the certificate template requires for approval.

What to check for CERTSRV_E_ISSUANCE_POLICY_REQUIRED

  • Determine which issuance-policy OIDs the template requires and which signing or requester certificate should provide them.
  • Check the enrollment-agent or registration-authority certificate for the required issuance policies.
  • Treat policy OIDs as authorization controls; do not substitute unrelated OIDs just to satisfy a string comparison.

Microsoft: Certificate template concepts

Microsoft: Manage certificate templates

Microsoft: Audit Certification Services

Diagnostic discriminator: Inspect the certificate request policies against the CA template or policy module requirements. This result means a required issuance policy is missing from the request.


Looking for a different code? Search another status or error code.