Category: Certification Authority

Details of the event with ID 19 of the source Microsoft-Windows-CertificationAuthority

Event Source:Microsoft-Windows-CertificationAuthority
Event ID:19 (0x13)
Event log:Application
Event type:Error
Symbolic Name:MSG_E_REG_BAD_SUBJECT_TEMPLATE
Event text (English):Active Directory Certificate Services did not start: The Subject Name Template string in the registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration\%1\SubjectTemplate is invalid. An example of a valid string is: CommonName OrganizationalUnit Organization Locality State Country
Event text (German):Die Active Directory-Zertifikatdienste wurden nicht gestartet: Die Zeichenfolge der Antragstellernamensvorlage im Registrierungseintrag HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration\%1\SubjectTemplate ist ungültig. Ein Beispiel eines gültigen Eintrags ist: CommonName OrganizationalUnit Organization Locality State Country

Continue reading "Details of the event with ID 19 of the source Microsoft-Windows-CertificationAuthority"

Details of the event with ID 17 of the source Microsoft-Windows-CertificationAuthority

Event Source:Microsoft-Windows-CertificationAuthority
Event ID:17 (0x11)
Event log:Application
Event type:Error
Symbolic Name:MSG_E_DB_INIT_FAILED
Event text (English):Active Directory Certificate Services did not start: Unable to initialize the database connection for %1. %2.
Event text (German):Die Active Directory-Zertifikatdienste wurden nicht gestartet: Die Datenbankverbindung kann nicht initialisiert werden: %1. %2.

Continue reading "Details of the event with ID 17 of the source Microsoft-Windows-CertificationAuthority"

Details of the event with ID 9 of the source Microsoft-Windows-CertificationAuthority

Event Source:Microsoft-Windows-CertificationAuthority
Event ID:9 (0x9)
Event log:Application
Event type:Error
Symbolic Name:MSG_NO_POLICY
Event text (English):The Active Directory Certificate Services did not start: Unable to load an external policy module.
Event text (German):Die Active Directory-Zertifikatdienste wurden nicht gestartet: Es konnte kein externes Richtlinienmodul geladen werden.

Continue reading "Details of the event with ID 9 of the source Microsoft-Windows-CertificationAuthority"

Details of the event with ID 8 of the source Microsoft-Windows-CertificationAuthority

Event Source:Microsoft-Windows-CertificationAuthority
Event ID:8 (0x8)
Event log:Application
Event type:Information
Event text (English):Active Directory Certificate Services left request %1 pending in the queue for %2.
Event text (German):Die Anforderung %1 von %2 wurde in die Warteschlange gestellt.

Continue reading "Details of the event with ID 8 of the source Microsoft-Windows-CertificationAuthority"

Details of the event with ID 7 of the source Microsoft-Windows-CertificationAuthority

Event Source:Microsoft-Windows-CertificationAuthority
Event ID:7 (0x7)
Event log:Application
Event type:Warning
Symbolic Name:MSG_DN_CERT_DENIED
Event text (English):Active Directory Certificate Services denied request %1 because %2. The request was for %3.
Event text (German):Die Anforderung %1 wurde abgelehnt, da %2. Die Anforderung war für %3.

Continue reading "Details of the event with ID 7 of the source Microsoft-Windows-CertificationAuthority"

Details of the event with ID 6 of the source Microsoft-Windows-CertificationAuthority

Event Source:Microsoft-Windows-CertificationAuthority
Event ID:6 (0x6)
Event log:Application
Event type:Information
Event text (English):Active Directory Certificate Services issued a certificate for request %1 for %2.
Event text (German):Ein Zertifikat wurde für die Anforderung %1 für %2 ausgestellt.

Continue reading "Details of the event with ID 6 of the source Microsoft-Windows-CertificationAuthority"

Details of the event with ID 16 of the source Microsoft-Windows-CertificationAuthority

Event Source:Microsoft-Windows-CertificationAuthority
Event ID:16 (0x10)
Event log:Application
Event type:Error
Event text (English):Active Directory Certificate Services did not start: Unable to initialize OLE: %1.
Event text (German):Die Active Directory-Zertifikatdienste wurden nicht gestartet: OLE konnte nicht initialisiert werden: %1.

Continue reading "Details of the event with ID 16 of the source Microsoft-Windows-CertificationAuthority"

Details of the event with ID 15 of the source Microsoft-Windows-CertificationAuthority

Event Source:Microsoft-Windows-CertificationAuthority
Event ID:15 (0xF)
Event log:Application
Event type:Error
Event text (English):Active Directory Certificate Services did not start: Version does not match certif.dll.
Event text (German):Die Active Directory-Zertifikatdienste wurden nicht gestartet: Die Version stimmt nicht mit "certif.dll" überein.

Continue reading "Details of the event with ID 15 of the source Microsoft-Windows-CertificationAuthority"

Details of the event with ID 10 of the source Microsoft-Windows-CertificationAuthority

Event Source:Microsoft-Windows-CertificationAuthority
Event ID:10 (0xA)
Event log:Application
Event type:Error
Symbolic Name:MSG_E_CANNOT_BUILD_CERT_OR_CHAIN
Event text (English):Active Directory Certificate Services were unable to build a new certificate or certificate chain: %1.
Event text (German):Es konnte kein neues Zertifikat bzw. keine Zertifikatkette erstellt werden: %1.

Continue reading "Details of the event with ID 10 of the source Microsoft-Windows-CertificationAuthority"

Details of the event with ID 5 of the source Microsoft-Windows-CertificationAuthority

Event Source:Microsoft-Windows-CertificationAuthority
Event ID:5 (0x5)
Event log:Application
Event type:Error
Symbolic Name:MSG_BAD_REGISTRY
Event text (English):Active Directory Certificate Services could not find required registry information. The Active Directory Certificate Services may need to be reinstalled.
Event text (German):Die erforderlichen Registrierungsinformationen konnten nicht gefunden werden. Die Active Directory-Zertifikatdienste müssen möglicherweise neu installiert werden.

Continue reading "Details of the event with ID 5 of the source Microsoft-Windows-CertificationAuthority"

Change the signing algorithm of a certification authority hierarchy without issuing new certification authority certificates

Sometimes it may be necessary to subsequently change the signature algorithm of an already installed certification authority hierarchy.

This is often the case because one has installed them with PKCS#1 version 2.1 and unfortunately finds out afterwards that not all applications are compatible with the resulting certificates, and thus cannot use the hierarchy.

While it is relatively easy to change the signature algorithm for certificates issued by a certification authority, it is more difficult to do so for certification authority certificates.

Continue reading "Change the signing algorithm of a certification authority hierarchy without issuing new certification authority certificates"

The certification authority service does not start and throws the error message "The parameter is incorrect. 0x80070057 (WIN32: 87 ERROR_INVALID_PARAMETER)"

Assume the following scenario:

  • A certification authority is implemented in the network.
  • The certification authority service does not start.
  • When trying to start the certification authority service, you get the following error message:
The parameter is incorrect. 0x57 (WIN32: 87 ERROR_INVALID_PARAMETER)

Continue reading "The certification authority service does not start and throws the error message "The parameter is incorrect. 0x80070057 (WIN32: 87 ERROR_INVALID_PARAMETER)""