XADM: Templates Error Message Installing the Exchange Key Management Service (272280)

SYMPTOMS

When you attempt to add the Exchange Key Management Service (KMS) component, you may receive the following error message:

The component "Microsoft Exchange Key Management Service" cannot be assigned the action "Install" because:

At least one Enterprise Certificate Authority must be installed and have been configured to issue "Enrollment Agent (Computer), "Exchange User", and "Exchange Signature Only" certificates.

You must either cancel the Exchange 2000 Server Setup program or continue Setup without the KMS component.

CAUSE

This issue can occur if the enterprise certificate authority is not configured to issue Enrollment Agent (Computer) certificates, Exchange User certificates, and Exchange Signature Only certificates.

RESOLUTION

To resolve this issue, install the certificate templates:

On the Microsoft Windows 2000 Certificate Server-based computer click Start, point to Programs, point to Administrative Tools, and then click Certification Authority.
In the console tree, double-click the name of your certificate authority.
Right-click Policy Settings, point to New, and then click Certificate to Issue.
In Select Certificate Template, hold down the CTRL key to make multiple selections, click Enrollment Agent (Computer), Exchange User, and Exchange Signature Only, and then click OK.

After you install the certificate templates, you can add the KMS component in Add/Remove Programs in Control Panel by double-clicking Change/Remove next to Microsoft Exchange 2000.