Getting error "the request contains conflicting template information" when trying to use certreq to renew a client cert

we trying automate "renewal" of certificates our thin clients @ our remote location using script , certreq commands pull new cert our central server ca.  getting error saying "the request contains conflicting template information ... denied policy module ...".  here script:

$cert = get-childitem cert:localmachine\my  #[string]$subject = "cn=$env:computername,ou=workstations,ou=retail store equipment,dc=retail,dc=wd,dc=com"  [string]$subject = "cn=$env:computername.retail.wd.com"  [string]$templatename = "client authentication – retail desktops"  [string]$caname = "escahdq02.wd.com\wdenterprisesubordinateca-02"  [string]$san = "$env:computername.retail.wd.com"  [string]$renewalcert = $cert.thumbprint  remove-item c:\supusercert.inf -erroraction silentlycontinue -force  remove-item c:\supusercert.req -erroraction silentlycontinue -force  remove-item c:\usercert.req -erroraction silentlycontinue -force  add-content c:\supusercert.inf "[newrequest]`r  machinekeyset=true`r  requesttype=cmc`r  renewalcert=$renewalcert`r  silent=true`r  subject=`"$subject`"`r  useexistingkeyset=true`r  [extensions]`r  2.5.29.17 = `"{text}`"`r  _continue_ = `"dns=$san`"`r"  certreq -new c:\supusercert.inf c:\usercert.req  certreq -submit -config "$caname" c:\usercert.req c:\new.cer  certreq -accept c:\new.cer

hi,

this not right forum question let's see can do.

can check settings under subject name tab certitifcate template ("client authentication - retail desktops") using?

is set supply in request?

thank you,

lutz

Windows Server  >  Security