| Previous | Next |
| CERTSRV_E_SIGNATURE_REJECTED | CERTSRV_E_SUBJECT_UPN_REQUIRED |
CERTSRV_E_ISSUANCE_POLICY_REQUIRED
CERTSRV_E_ISSUANCE_POLICY_REQUIRED The request lacks one or more issuance policies that the certificate template requires for approval.
What to check for CERTSRV_E_ISSUANCE_POLICY_REQUIRED
- Determine which issuance-policy OIDs the template requires and which signing or requester certificate should provide them.
- Check the enrollment-agent or registration-authority certificate for the required issuance policies.
- Treat policy OIDs as authorization controls; do not substitute unrelated OIDs just to satisfy a string comparison.
Microsoft: Certificate template concepts
Microsoft: Manage certificate templates
Microsoft: Audit Certification Services
Diagnostic interpretation
This result has the HRESULT value 0x8009480C. AllStat records the condition as “The request is missing one or more required signature issuance policies.”.
Evidence to capture
- Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the certsrv / issuance / policy / required operation.
- Reproduce this result with the smallest valid input and note whether the result changes with identity, architecture, service state, or target object.
Retry and recovery
” has changed.
Looking for a different code? Search another status or error code.