What does HRESULT 0x80094012 (CERTSRV_E_TEMPLATE_DENIED) mean?

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

CERTSRV_E_TEMPLATE_DENIED the permissions on the certificate template do not allow the current user to enroll for this type of certificate.

Previous	Next
CERTSRV_E_ENROLL_DENIED	CERTSRV_E_DOWNLEVEL_DC_SSL_OR_UPGRADE

CERTSRV_E_TEMPLATE_DENIED

CERTSRV_E_TEMPLATE_DENIED The requester is not authorized by the certificate template’s security descriptor to enroll for this template.

Open the template in Certificate Templates MMC and review Read, Enroll, and Autoenroll permissions for the requester’s effective groups.
Verify that the template is published on the issuing CA; permission alone does not make an unpublished template available.
Avoid granting Enroll broadly on templates that contain client-authentication, enrollment-agent, or other high-impact EKUs.