First i´ve generated a CSR and confirmed that is Ok with a CSR Decoder
Decoder: http://www.sslshopper.com/csr-decoder.html
Everything OK: subject name, SAN, org, etc.
Second, I´ve enabled the SAN in My AD CS Enterprise and restarted services:
certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2
net stop/net start
Third: When i try to create the request:
Active Directory Certificate Services denied request 187 because The request contains no certificate template information. 0x80094801 (-2146875391). The request was for C=BR, S=Rio de Janeiro, L=Rio de Janeiro, OU=TI, O=COMPANY, CN=wifi.COMPANY.com.br. Additional information: Denied by Policy Module 0x80094801, The request does not contain a certificate template extension or the CertificateTemplate request attribute.
Other errors:
Custom Template with Key Archival
certreq -submit -attrib "CertificateTemplate:WebServerTemplate" myreq.csr
Active Directory Enrollment Policy
{212C812F-6BC8-4F08-A4B5-1250FF13EA79}
ldap:
RequestId: 185
RequestId: "185"
Certificate not issued (Denied) Denied by Policy Module The request is missing a required private key for archival by the server. 0x80094804 (-21468
75388)
Certificate Request Processor: The request is missing a required private key for archival by the server. 0x80094804 (-2146875388)
Denied by Policy Module
Default Template
certreq -submit -attrib "CertificateTemplate:Web Server" myreq.csr
Active Directory Enrollment Policy
{212C812F-6BC8-4F08-A4B5-1250FF13EA79}
ldap:
RequestId: 186
RequestId: "186"
Certificate not issued (Denied) Denied by Policy Module 0x80094800, The request was for a certificate template that is not supported by the Active
Directory Certificate Services policy: Web Server.
The requested certificate template is not supported by this CA. 0x80094800 (-2146875392)
Certificate Request Processor: The requested certificate template is not supported by this CA. 0x80094800 (-2146875392)
Denied by Policy Module 0x80094800, The request was for a certificate template that is not supported by the Active Directory Certificate Services p
olicy: Web Server.
How can i know wich specific extension is causing the problem?
Can can i create a .INF file?
How it can be solved?