Tag: esentutl

When creating a backup of a certification authority , the question may arise as to how to ensure the integrity of the certification authority database backup, so that it can be correctly restored in an emergency.

The certification authority database is based on a Microsoft JET Blue database engine (also known as Extensible Storage Engine, ESE ). Its working and backup files have the extension .edb and can be managed with the operating system tool esentutl .

Continue reading "Checking the integrity of backups of the certification authority database"

Sometimes it happens that the database of the certification authority becomes extremely large. Perhaps a large number of certificate requests have arrived unnoticed and have been denied, or perhaps there are many certificates in the database that have been issued twice. After the corresponding entries have been deleted from the certification authority database , the space now gained must (can) still be freed in the server's file system by compacting the database.

Continue reading "Compacting (defragmenting) the certification authority database"

Assume the following scenario:

• You use certutil.exe or the PowerShell commandlet Backup-CAService to back up your Active Directory Certificate Services database.
• In addition to a full backup, you also perform regular incremental backups of the CA database.
• The incremental backups fail with error message "The database missed a previous full backup before incremental backup".

Incremental database backup for…
 Backing up Log files: 0%CertUtil: -backupDB command FAILED: 0xc8000230 (ESE: -560 JET_errMissingFullBackup)
 CertUtil: The database missed a previous full backup before incremental backup

Continue reading "Incremental backups of the certification authority database fail with the error message "The database missed a previous full backup before incremental backup""