Scenario
Certificate autoenrollment worked before, but a template change caused renewals or new enrollments to stop.
Recommended Resolution Path
- Review template permissions, supersedence, and subject name requirements after the change.
- Check client autoenrollment logs and the CA issuance queue.
- Test one certificate request manually before broad rollback.
- Document template changes like code changes because PKI drift is easy to underestimate.
Technician Notes
Document what changed, what confirmed the fix, and whether the issue points to a broader standards gap worth addressing for the client.
- Log in to post comments
Subjects