Here is a little tidbit that I've been meaning to post for some time now (sorry the move kinda had me side tracked).  Anyhow, I was working with MS support on a Windows Server 2003 certificate template issue.  To show the escalation engineer that the issue was reproducible, I replicated (or at least thought I replicated the issue just before leaving for Japan) using a 2008 based CA within my home lab.

In short, the issue that was occurring was only with newly created custom certificate templates.  After creating the template and assigning to a CA, the web enrollment pages were in turn never/not showing the certificate template.  However, after showing this to the engineer, he stated this was actually by design in Windows Server 2008.

Say what!

Yeah, yeah... this was basically not documented (kinda) until very recently.  In short, the 2008 version of the web enrollment pages are still using the old version of the scrdenrl.dll (Smart Card Enrollment control).  Considering that this control is being phased out, it was not updated to support V3 templates.

So... for those of you trying to make a V3 template work with the 2008 web enrollment pages... stop!  :>)