Uwe Gradenegger - Page 7 - Passionate about PKI

Certificate requests for the online responder (OCSP) fail sporadically with error message "The revocation function was unable to check revocation for the certificate. 0x80092012 (-2146885614 CRYPT_E_NO_REVOCATION_CHECK)"

Assume the following scenario:

An online responder (OCSP) is set up in the network.
The certification authorities report at irregular intervals that certificate requests for the OCSP password signing certificates fail with the following error message:

The revocation function was unable to check revocation for the certificate. 0x80092012 (-2146885614 CRYPT_E_NO_REVOCATION_CHECK).

Programmatically trigger the autoenrollment process for the logged-in user

Assume the following scenario:

You write a script or an application that should trigger the autoenrollment process for the currently logged in user.
You will find out that the scheduled task cannot be executed.
The error message reads:

The user account does not have permissions to run this task.

Enable logging for automatic certificate request (autoenrollment)

The following is an overview of the Windows Event Viewer events generated for Windows certificate clients, their activation, and their identification.

Troubleshooting for automatic certificate request (autoenrollment) via RPC/DCOM (MS-WCCE)

Assume the following scenario:

A certificate template is configured for automatic certificate request (autoenrollment).
The certificate template is published on a certification authority (Enterprise Certification Authority) integrated into Active Directory.
However, the users or computers configured for automatic Certificate Enrollment do not apply for certificates as intended.

The following is a troubleshooting guide.

Details of the event with ID 1 of the source Microsoft-Windows-CertificateServicesClient

Event Source:	Microsoft-Windows-CertificateServicesClient
Event ID:	1 (0x1)
Event log:	Application
Event type:	Information
Event text (English):	Certificate Services Client has been started successfully.
Event text (German):	The certificate service client was started successfully.

Details of the event with ID 502 of the source Microsoft-Windows-CertificateServicesClient

Event Source:	Microsoft-Windows-CertificateServicesClient
Event ID:	502 (0x1F6)
Event log:	Application
Event type:	Warning
Event text (English):	Certificate Services Client failed to register Group Policy notifications. Error code: %1.
Event text (German):	Error registering group policy notifications by the certificate service client. Error code: %1.

Details of the event with ID 4 of the source Microsoft-Windows-CertificateServicesClient

Event Source:	Microsoft-Windows-CertificateServicesClient
Event ID:	4 (0x4)
Event log:	Application
Event type:	Information
Event text (English):	Certificate Services Client has detected network dis-connectivity.
Event text (German):	No network connectivity was detected by the certificate service client.

Details of the event with ID 2 of the source Microsoft-Windows-CertificateServicesClient

Event Source:	Microsoft-Windows-CertificateServicesClient
Event ID:	2 (0x2)
Event log:	Application
Event type:	Information
Event text (English):	Certificate Services Client has been stopped.
Event text (German):	The certificate service client has been stopped.

Details of the event with ID 1001 of the source Microsoft-Windows-CertificateServicesClient

Event Source:	Microsoft-Windows-CertificateServicesClient
Event ID:	1001 (0x3E9)
Event log:	Application
Event type:	Error
Event text (English):	Certificate Services Client failed to load Provider %1. Error code %2.
Event text (German):	Certificate service client: the provider %1 could not be loaded. Error code %2.

Details of the event with ID 3 of the source Microsoft-Windows-CertificateServicesClient

Event Source:	Microsoft-Windows-CertificateServicesClient
Event ID:	3 (0x3)
Event log:	Application
Event type:	Information
Event text (English):	Certificate Services Client has detected network connectivity.
Event text (German):	Network connectivity was detected by the certificate service client.

Details of the event with ID 501 of the source Microsoft-Windows-CertificateServicesClient

Event Source:	Microsoft-Windows-CertificateServicesClient
Event ID:	501 (0x1F5)
Event log:	Application
Event type:	Warning
Event text (English):	Certificate Services Client is triggered with bad parameters: %1.
Event text (German):	The certificate service client is triggered with incorrect parameters: %1.

Details of the event with ID 1003 of the source Microsoft-Windows-CertificateServicesClient

Event Source:	Microsoft-Windows-CertificateServicesClient
Event ID:	1003 (0x3EB)
Event log:	Application
Event type:	Error
Event text (English):	Certificate Services Client failed to invoke the Providers in response to event %1. Error code %2.
Event text (German):	Certificate Service Client: Failed to invoke providers in response to event %1. Error code %2.

Details of the event with ID 1002 of the source Microsoft-Windows-CertificateServicesClient

Event Source:	Microsoft-Windows-CertificateServicesClient
Event ID:	1002 (0x3EA)
Event log:	Application
Event type:	Error
Event text (English):	Certificate Services Client cannot find the required interface in Provider %1. Error code %2.
Event text (German):	Certificate Service Client: The required interface at provider %1 was not found. Error code %2.

Details of the event with ID 1004 of the source Microsoft-Windows-CertificateServicesClient

Event Source:	Microsoft-Windows-CertificateServicesClient
Event ID:	1004 (0x3EC)
Event log:	Application
Event type:	Error
Event text (English):	Certificate Services Client Provider %1 raised an exception. Exception code %2.
Event text (German):	Certificate Service Client: Provider %1 has reported an exception case. Exception code %2.

Details of the event with ID 95 of the source Microsoft-Windows-CertificateServicesClient-CertEnroll

Event Source:	Microsoft-Windows-CertificateServicesClient-CertEnroll
Event ID:	95 (0x425A005F)
Event log:	Application
Event type:	Information
Event text (English):	Successfully installed Logon Certificate for %1 Request thumbprint: %2 Thumbprint: %3 Process: %4
Event text (German):	The logon certificate for %1 was successfully installed. Request fingerprint: %2 Fingerprint: %3 Process: %4