In my attempt to submit a CSR for an internally generated Subject Alternative Name Certificate. I encountered the follow issue when attempting to submit it to my domain’s CA

I am using the ‘certreq’ method to enroll the new request.  Info on how to do this, found here: http://technet.microsoft.com/en-us/library/ff625722(v=ws.10).aspx#BKMK_CertEnroll

Each attempt I got the following message:

Certificate not issued (Denied) Denied by Policy Module 0x80094801, The request does not contain a certificate template extension or the CertificateTemplate request attribute.

The request contains no certificate template information. 0x80094801 (-214687591)

Certificate Request Processor: The request contains no certificate template information. 0x80094801 (-2146875391)

Denied by Policy Module 0x80094801, The request does not contain a certificate template extension or the CertificateTemplate request attribute.

It seems that this custom template was not listed in my certificate authority; but I knew its purpose was for a web server. So by opening the command prompt into the directory of my request file, ran the following command:

certreq -submit -attrib “CertificateTemplate:WebServer” <request.req> 

I was prompt for the CA Server name and after selecting it my request was processes and I was issued my certificate.