Edit

Certificate used by Wired or Wireless Network policies is missing in GPO settings report

  • Article

This article provides a solution to an issue that certificate used by Wired or Wireless Network policies is missing in GPO settings report.

Applies to:   Windows 10 - all editions, Windows Server 2016, Windows Server 2019, Windows Server 2012 R2
Original KB number:   4047738

Symptoms

Consider the following scenario:

  • You configure one of the following policies of a group policy object (GPO) to use the Microsoft: Smart Card or other certificate authentication method:

    • Wired Network (IEEE 802.3)
    • Wireless Network (IEEE 802.11)

  • You specify a root certification authority (CA) certificate to be used by the authentication.

  • The certificate has a single subject name.

In this scenario, the certificate is missing in the GPO settings report.

Example settings and screenshots:

You set the following CA certificates to be used by the authentication:

  • The first certificate has multiple subject names:

    CN = Contoso OneAD Root CA
    DC = contoso
    DC = com

    Set the first certificate to have multiple subject names.

  • The second certificate has a single subject name:

    CN = Contoso OneAD Root CA2

    Set the second certificate to have a single subject name.

In this example, the GPO settings report displays only the first certificate. The second certificate is missing.

Certificate that contains a single subject names is missing.

Cause

The issue occurs because of a code defect in Windows.

Status

This issue affects only the GPO settings report. The certificate is successfully used by the authentication.