Certificate template not enrolling or autoenrolling
Once configured, a Windows certificate template may not enroll or autoenroll for users or devices. The sections below list possible causes and corresponding solutions.
Missing Group Policy Object
The Group Policy Object to enable autoenrollment may not have been created, or may not have been linked to the various domains in the Windows Active Directory forest.
Issue resolution: Configure a Group Policy Object by following the steps below.
- Enabling autoenrollment for users
- Enabling autoenrollment for devices
- Linking the WSTEP Group Policy Object
Missing permissions
The user or group may not have permission to enroll or autoenroll.
Issue resolution: Use the Security settings to select the users and groups with permission to enroll and autoenroll.