Last year I had taken some steps to implement Automatic Certificate renewals. Which included the following, creating a new certificate template (copy of Web Server) however with Schema Version 4 and Version 100.7. The Subject name tab has the checkbox enabled for "Supply in request" to fill in the (what I assume will be common name and the SAN).
Ok so far so good. However I had some left the cert to expire within 1 year, and I guess I forgot to follow up on the ticket I had created, and I also forgot to set sensors on the service, and there was a service interruption. When I went to go check on the service, it was quickly discovered that the certificate had expired, checking IIS showed no certificate bound to the SSL/HTTPS listener, checking the machine certificate store showed the certificate had been deleted.
I found this link personal-certificates-disappears-exchange-efs where Wendy provided an action plan. I validated the registry was set to 0x000000007. The Machine is able to request a certificate without issue when I issue them manually. Then something fails, I don't know what yet it still deletes the certificate. What can I do to get auto enrollment to work? Are there any log locations? I noticed my task scheduler folder as mentioned by Wendy in the second link only had 3 items, where my server shows 6 items? Server is 2016.
