Enrolment agent (enrol on behalf of) stopped working

[James281]

Midway through the year, I created an enrolment agent template to allow service desk users to enrol certs on users' behalf. This was working fine until a day or so ago, when all of a sudden users are receiving a no certificate matches the application criteria message when clicking browse on the select a signing certificate dialogue.

I tested this on my own PC under personal certs and even re-issued a fresh cert. The cert is valid and OK but just isn't being detected.

This is a two tier offline and subordinate PKI set up in Windows Server 2016. Has anyone else experienced this?

 

[mikehook]

I'm not sure I know exactly how to solve this problem - but I have the same one. I will be grateful for any information! I want to share my find - I ask for help in writing a cv from top cv review topcvwritersuk.com/topcv-review/ - it saves me a lot of time and at the same time a great result