Cannot install the Certificate Authority Web Enrollment component

I have recently been faced with a Certificate Authority server running on Microsoft Windows 2008 R2 that was refusing to have the Web Enrollment component installed.

I have tried installing by the GUI and using powershell using add-windowsfeature ADCS-Web-Enrollment and both method failed with the following error

"Certification Authority Web Enrollment cannot be installed on this computer or Error: Cannot install Certification Authority Web Enrollment."

The solution to this problem is

1. Run regedit on the server
2. Browse to HKLocalMachine\System\CurrentControlSet\Services\CertSvc\Configuration
3. Change the SetupStatus key to 0×6001 (it was 0x6003 in my case)

Et voila you should be able to install the web enrollment now without issues

About Antoine Khater

I have been working in IT consultancy and solution integration since 1998 and I consider myself lucky to be, one in a few, making a living out of my passion. I am also member of the famous Experts Exchange (profile here) online community where I try my best to share what I have learned along the road.