Details of the event with ID 9 of the source Microsoft-Windows-EnrollmentPolicyWebService
| Event Source: | Microsoft-Windows-EnrollmentPolicyWebService |
| Event ID: | 9 (0x9) |
| Event log: | Microsoft-Windows-EnrollmentPolicyWebService/Admin |
| Event type: | Error |
| Event text (English): | The Active Directory certificate enrollment policy provider failed to obtain policy information from Active Directory Domain Services (AD DS). The provider will attempt to read the information again in %1 milliseconds. If the problem persists, enable tracing in the web.config file, enable logging by using "certutil -setreg debug 0xffffffe3", restart IIS by using iisreset.exe, attempt to obtain policy information from any client, and then contact Microsoft Customer Service and Support with the information in the trace files and certenroll.log file. %2 |
| Event text (German): | Der Active Directory-Zertifikatregistrierungsrichtlinien-Anbieter konnte die Richtlinieninformationen von den Active Directory-Domänendiensten nicht abrufen. In "%1" Millisekunden wird versucht, die Informationen erneut zu lesen. Falls das Problem weiterhin besteht, aktivieren Sie in der Datei "web.config" die Ablauferfolgung, aktivieren Sie mithilfe von "certutil -setreg debug 0xffffffe3" die Protokollierung, starten Sie IIS neu, rufen Sie von einem beliebigen Client Richtlinieninformationen ab, und wenden Sie sich dann mit den Informationen der Ablaufverfolgungsdateien und der Datei "certenroll.log" an den Microsoft Kundendienst und Support. %2 |
Parameter
The parameters contained in the event text are filled with the following fields:
- %1: RetryIntervalMs (win:Int32)
- %2: Error (win:Int32)
The Certificate Enrollment Web Services (Certificate Enrollment Policy Web Service, CEP, and Certificate Enrollment Web Service, CES) enable the automatic request and renewal of certificates from a certification authority via a web-based interface. This eliminates the need to contact the certification authority directly via Remote Procedure Call (RPC). For a more detailed description, see the article "Basics: Requesting certificates via Certificate Enrollment Web Services (CEP, CES) ".
Example events
The Active Directory certificate enrollment policy provider failed to obtain policy information from Active Directory Domain Services (AD DS). The provider will attempt to read the information again in 1800000 milliseconds. If the problem persists, enable tracing in the web.config file, enable logging by using "certutil -setreg debug 0xffffffe3", restart IIS by using iisreset.exe, attempt to obtain policy information from any client, and then contact Microsoft Customer Service and Support with the information in the trace files and certenroll.log file. A directory service error has occurred.Description
Do you know TameMyCerts? TameMyCerts is an add-on for the Microsoft certification authority (Active Directory Certificate Services). It extends the function of the certification authority and enables the application of rule sets to realize the secure automation of certificate issuance. TameMyCerts is unique in the Microsoft ecosystem, has already proven itself in countless companies around the world and is available under a free license. It can be downloaded via GitHub and used free of charge. Professional maintenance is also offered.
No description has been written for this yet.
Security assessment
The security assessment is based on the three dimensions of confidentiality, integrity and availability.
No description has been written for this yet.