AD CS web enrollment loads but certificate request submission fails

Scenario

The web enrollment page opens, but submissions fail or never issue the requested certificate.

Recommended Resolution Path

1. Check CA service health, template permissions, and request disposition settings.
2. Review IIS and CA logs together to locate the failure stage.
3. Test with a simpler template to isolate whether the web path or template configuration is the issue.
4. If the CA is critical, avoid repeated failed requests without understanding the policy impact.

Technician Notes

Capture the exact scope of impact, confirm which dependency failed first, and document whether the issue reflects broader domain or server drift.