Publishing a certificate template on a CA fails with error message "The template information on the CA cannot be modified at this time. This is most likely because the CA service is not running or there are replication delays. Access is denied. 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)".

Assume the following scenario:

• An administrator publishes a certificate template on a certificate authority.
• The operation fails with the following error message:

The template information on the CA cannot be modified at this time. This is most likely because the CA service is not running or there are replication delays. Access is denied. 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)

Cause

Do you know TameMyCerts? TameMyCerts is an add-on for the Microsoft certification authority (Active Directory Certificate Services). It extends the function of the certification authority and enables the Application of regulationsto realize the secure automation of certificate issuance. TameMyCerts is unique in the Microsoft ecosystem, has already proven itself in countless companies around the world and is available under a free license. It can downloaded via GitHub and can be used free of charge. Professional maintenance is also offered.

Possible causes can be:

• The permissions of the certification authority computer on the pKIEnrollmentService object in the Active Directiory are incorrect.

Details: The permissions of the certification authority computer on the pKIEnrollmentService object in the Active Directiory are incorrect.

The "Write" right is not sufficient. Besides "Write" is needed:

• Delete
• Modify
• Modify Owner

Related links:

• Perform functional test for a Certification Authority