| Event Source: | Microsoft-Windows-CertificateServicesClient-CertEnroll |
| Event ID: | 74 (0x825A004A) |
| Event log: | Application |
| Event type: | Warning |
| Event text (English): | Certificate enrollment for %1 failed to load policy from policy server %2 with ID %3 (%4) |
| Event text (German): | Fehler beim Laden der Richtlinie mithilfe der Zertifikatregistrierung für %1 vom Richtlinienserver %2 mit der ID %3 (%4). |
| Event Source: | Microsoft-Windows-CertificateServicesClient-CertEnroll |
| Event ID: | 75 (0x825A004B) |
| Event log: | Application |
| Event type: | Warning |
| Event text (English): | Certificate enrollment for %1 failed in authentication to policy server %2 with ID %3 (%6). Authentication mechanism was %5 (Credential: %4) |
| Event text (German): | Fehler bei Zertifikatregistrierung für %1 bei der Authentifizierung für den Richtlinienserver %2 mit der ID %3 (%6). Verwendeter Authentifizierungsmechanismus %5 (Anmeldeinformationen: %4) |
| Event Source: | Microsoft-Windows-CertificateServicesClient-CertEnroll |
| Event ID: | 86 (0xC25A0056) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | SCEP Certificate enrollment initialization for %1 via %2 failed: %3 Method: %4 Stage: %5 %6 |
| Event text (German): | Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für %1 über %2: %3 Methode: %4 Phase: %5 %6 |
| Event Source: | Microsoft-Windows-CertificateServicesClient-CertEnroll |
| Event ID: | 87 (0xC25A0057) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | SCEP Certificate enrollment for %1 via %2 failed: %3 Method: %4 Stage: %5 %6 |
| Event text (German): | Fehler bei der SCEP-Zertifikatregistrierung für %1 über %2: %3 Methode: %4 Phase: %5 %6 |
Assume the following scenario:
Server could not be reached: The RPC server is unavailable. 0x800706ba (WIN32: 1722 RPC_S_SERVER_UNAVAILABLE) -- (31ms)
CertUtil: -ping command FAILED: 0x800706ba (WIN32: 1722 RPC_S_SERVER_UNAVAILABLE)
CertUtil: The RPC server is unavailable.Assume the following scenario:
Continue reading "New certificates are regularly requested via autoenrollment"
Assuming a use case is implemented for certificates where users specify the identity contained in the certificate in the certificate request, and this requires manual intervention by the certificate managers, the question arises as to how to proceed when the certificates expire or the certificate template is moved to another certification authority in order to minimize tickets at the help desk and thus the resulting work for the certificate managers.
| Event Source: | Microsoft-Windows-CertificateServicesClient-CertEnroll |
| Event ID: | 4 (0x425A0004) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | Certificate enrollment for %1 could not access local resources or retrieve %2 certificate template information (%3). Enrollment was not performed. |
| Event text (German): | Die Zertifikatregistrierung für %1 konnte nicht auf lokale Ressourcen zugreifen bzw Zertifikatvorlageninformationen für %2 abrufen (%3). Es wird keine Registrierung durchgeführt. |
| Event Source: | Microsoft-Windows-CertificateServicesClient-CertEnroll |
| Event ID: | 13 (0xC25A000D) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | Certificate enrollment for %1 failed to enroll for a %2 certificate with request ID %4 from %3 (%5). |
| Event text (German): | Die Zertifikatregistrierung für %1 konnte sich nicht für ein Zertifikat %2 mit der Anforderungs-ID %4 von %3 (%5) registrieren. |
| Event Source: | Microsoft-Windows-CertificateServicesClient-CertEnroll |
| Event ID: | 57 (0x825A0039) |
| Event log: | Application |
| Event type: | Information, Warning and Error |
| Event text (English): | The "%2" provider was not loaded because initialization failed. |
| Event text (German): | Der "%2"-Anbieter wurde aufgrund eines Initialisierungsfehlers nicht geladen. |
| Event Source: | Microsoft-Windows-CertificateServicesClient-CertEnroll |
| Event ID: | 82 (0x825A0052) |
| Event log: | Application |
| Event type: | Warning |
| Event text (English): | Certificate enrollment for %1 failed in authentication to all urls for enrollment server associated with policy id: %2 (%4). Failed to enroll for template: %3 |
| Event text (German): | Fehler bei der Zertifikatregistrierung für %1 bei der Authentifizierung für alle URLs für den Registrierungsserver, der folgender Richtlinien-ID zugeordnet ist: %2 (%4). Fehler bei der Registrierung für Vorlage: %3 |
If autoenrollment is used, the participants request certificates on their own and also renew them on their own.
Regarding the validity of the certificates and the period for their automatic renewal, there are two values that can be configured in the "General" tab of a certificate template:
When operating a certification authority, it may be necessary to renew all issued certificates for a specific certificate template, for example due to major configuration changes or a change of the issuing certification authority. The following describes a mechanism with which this can be achieved automatically.
Assume the following scenario:
The following describes the process that runs in the background when certificates are requested manually or automatically in order to achieve the highest possible level of automation.