| Previous | Next |
| CERTSRV_E_KEY_ATTESTATION_NOT_SUPPORTED | CERTSRV_E_UNSUPPORTED_CERT_TYPE |
CERTSRV_E_ENCRYPTION_CERT_REQUIRED
CERTSRV_E_ENCRYPTION_CERT_REQUIRED The enrollment request requires an encryption certificate, but none was supplied. This commonly occurs in workflows that protect a request payload or rely on a designated encryption identity.
What to check
- Identify the template or policy module that requires an encryption certificate and verify which certificate type it expects.
- Confirm that the requester has access to a valid, intended encryption certificate and private key.
- Do not substitute an authentication-only certificate unless the policy explicitly permits it; EKU and key-usage requirements matter.
Microsoft: Certificate template concepts
Microsoft: Active Directory Certificate Services overview
Looking for a different code? Search another status or error code.