Several of my clients always face an issue when they want to renew the exchange certificate from their internal CA which doesn’t have the Web Enrollment installed and configured.

When they try to issue the certificate from the GUI they get the below issue

Denied By Policy Module 0x80094801, The Request does not contain a certificate template extension or the certificate template request attribute.

clip_image002

Now the solution is very easy, once you get a hold of the .req file you need to copy it over to you CA Server and run the below command

certreq -submit -attrib "CertificateTemplate:WebServer" <Cert Request.req>

Then you will be issued the certificate given you have proper permissions.