| Previous | Next |
| CERTSRV_E_ISSUANCE_POLICY_REQUIRED | CERTSRV_E_SUBJECT_DIRECTORY_GUID_REQUIRED |
CERTSRV_E_SUBJECT_UPN_REQUIRED
CERTSRV_E_SUBJECT_UPN_REQUIRED The template needs a User Principal Name in the Subject Alternative Name, but the CA cannot obtain a UPN for the subject from directory data.
What to check
- Verify that the request targets the intended user object and that its userPrincipalName attribute is populated and replicated.
- Review template Subject Name settings to confirm that the CA is expected to build the UPN SAN from Active Directory.
- For service or device certificates, use a template that requires the appropriate identity type instead of a user-logon profile.
Microsoft: Subject Alternative Name guidance
Microsoft: Certificate template concepts
Microsoft: Manage certificate templates
Looking for a different code? Search another status or error code.