I have recently been faced with a Certificate Authority server running on Microsoft Windows 2008 R2 that was refusing to have the Web Enrollment component installed.
I have tried installing by the GUI and using powershell using add-windowsfeature ADCS-Web-Enrollment and both method failed with the following error
"Certification Authority Web Enrollment cannot be installed on this computer or Error: Cannot install Certification Authority Web Enrollment."
The solution to this problem is
- Run regedit on the server
- Browse to HKLocalMachine\System\CurrentControlSet\Services\CertSvc\Configuration
- Change the SetupStatus key to 0×6001 (it was 0x6003 in my case)
Et voila you should be able to install the web enrollment now without issues