Certificate Template OID not working in INF file

Question

I am trying to create a certificate request using the following INF file but I keep getting the following error:
"An attempt was made to perform an initialization operation when initialization has already been completed. 0x800704df (WIN32: 1247) ./cert.inf"
I have noticed that if I replace the certificate template with the actual name of the template as oppose to the OID all works fine. Why will it not accept the OID of the template, MS documentation states it should take either. 
INF file : 
[Version]
Signature = "$Windows NT$
[NewRequest]
Subject = "CN=npeorg,OU=DISA,OU=PKI,OU=DoD,O=U.S. Government,C=US"
KeySpec = 1
KeyLength = 2048
Exportable = TRUE
MachineKeySet = TRUE
ProviderName = "Microsoft RSA SChannel Cryptographic Provider"
ProviderType = 12
RequestType = PKCS10
[RequestAttributes]
CertificateTemplate= "1.3.6.1.4.1.311.21.8.10914437.5958723.2445199.10881373.13000133.184.5889660.12536910"
Please help ??

Answer 1

Hi,
Based on my research, when certreq tries to look up a template using the template OID string, the error 0x800704df (WIN32: 1247) could occur in a couple of situations:
•If certreq–new’s INF file specified the OID instead of the template name, as in CertificateTemplate=1.2.3….
•It could also happen when attempting certreq –sign on a request that contains a template OID extension. If the “user1” template is a V2 or V3 template in the failing scenario, that would explain why certreq –sign failed in this manner.
•Possible workaround: Using certreq –new and specifying the –cert option at the same time should not have this problem, because the INF file specified the template’s non-localized name.
Please also go through the below thread for more details:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/e4ae3bd3-695e-4a87-b23d-8b3dffc00382/manually-request-for-user-certificate
Regards,
Yan Li
Regards, Yan Li