What steps should I take to fix the problem of being unable to submit and sign the CSR due to being denied by Policy Module 0x80094800?

edit

Here are the steps to fix the problem of being unable to submit and sign the CSR due to being denied by Policy Module 0x80094800:

1. Check the error message: When you encounter an error while submitting and signing the CSR, check the error message carefully. Policy Module 0x80094800 means the certificate template has not been published in Active Directory or its permissions are not correct.

2. Verify certificate template permissions: The certificate template needs to have the necessary permissions to allow the appropriate users to create and use the certificate. To verify the permissions, follow these steps:

• Open the Certification Authority snap-in.
• Right-click the Certificate Templates folder and select Manage to open the Certificate Templates console.
• Right-click the certificate template you want to verify and select Properties.
• On the Security tab, verify that the appropriate users have the necessary permissions to enroll and manage the certificate.

1. Publish the certificate template: If the certificate template has not been published, you will need to publish it in Active Directory. You can do this by following these steps:

• Open the Certification Authority snap-in.
• Right-click the Certificate Templates folder and select New > Certificate Template to Issue.
• Select the template you want to publish and click OK.

1. Restart the Certificate Authority service: After you have verified the permissions and published the certificate template, it may be necessary to restart the Certificate Authority service to ensure that the changes take effect.

• Open the Services console.
• Locate the Certificate Authority service.
• Right-click the service and select Restart.

1. Resubmit the CSR: Once you have completed the above steps, you can resubmit the CSR and it should be signed and submitted successfully.