Share via

CertUtil -Pulse fails to auto enroll certificate.

Question

Thursday, September 17, 2015 9:31 PM

Hi, we are trying to set up autoenrollment for a computer certificate in our domain and it is working on the majority of systems using group policy. On some computers though autoenrollment does not work and when I bypass group policy by running the Certutil -pulse command from an administrative command prompt it says it was completed successfully BUT no certificate is created at the domain root CA.

Does anyone have any ideas what to look for when even CertUtil -Pulse does not create the certificate? I am at a lost of where to go from here.

I will provide more details if anyone needs more information.

Thanks

All replies (1)

Thursday, September 24, 2015 6:43 AM âś…Answered

Hi,

To troubleshoot autoenrollment issue, please follow the guides below:

http://social.technet.microsoft.com/wiki/contents/articles/3048.troubleshooting-certificate-autoenrollment-in-active-directory-certificate-services-ad-cs.aspx

http://blogs.technet.com/b/xdot509/archive/2012/10/18/troubleshooting-autoenrollment.aspx

http://blogs.technet.com/b/instan/archive/2009/12/07/troubleshooting-autoenrollment.aspx

Best Regards.

Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected].