Tag: Event Viewer

Details of the event with ID 120 of the source Microsoft-Windows-Kerberos-Key-Distribution-Center

Event Source:Microsoft-Windows-Kerberos-Key-Distribution-Center
Event ID:120 (0x78)
Event log:Microsoft-Windows-Kerberos-Key-Distribution-Center/Operational
Event type:Error
Event text (English):The Key Distribution Center (KDC) failed to validate its current KDC certificate. This KDC might not be enabled for smart card or certificate authentication. Kdc Certificate Information: Issuer Name: %1 Serial Number: %2 Thumbprint: %3 Template: %4 Kerberos Error: %5 Validation Error: %6
Event text (German):Das Schlüsselverteilungscenter (KDC) konnte das aktuelle KDC-Zertifikat nicht überprüfen. Dieses KDC kann möglicherweise nicht für die Smartcard- oder Zertifikatauthentifizierung verwendet werden. KDC-Zertifikatinformationen: Ausstellername: %1 Seriennummer: %2 Fingerabdruck: %3 Vorlage: %4 Kerberos-Fehler: %5 Überprüfungsfehler: %6

Continue reading "Details of the event with ID 120 of the source Microsoft-Windows-Kerberos-Key-Distribution-Center"

Requesting certificates via the Network Device Enrollment Service (NDES) fails with error message "The public key does not meet the minimum size required by the specified certificate template. 0x80094811 (-2146875375 CERTSRV_E_KEY_LENGTH)"

Assume the following scenario:

  • A Network Device Enrollment Service (NDES) is implemented in the network.
  • Requesting a certificate fails with the following error message:
"The public key does not meet the minimum size required by the specified certificate template. 0x80094811 (-2146875375 CERTSRV_E_KEY_LENGTH)"

Continue reading "Requesting certificates via the Network Device Enrollment Service (NDES) fails with error message "The public key does not meet the minimum size required by the specified certificate template. 0x80094811 (-2146875375 CERTSRV_E_KEY_LENGTH)""

Requesting certificates via the Network Device Enrollment Service (NDES) fails with error message "The operation timed out 0x80072ee2 (WinHttp: 12002 ERROR_WINHTTP_TIMEOUT)"

Assume the following scenario:

  • A Network Device Enrollment Service (NDES) is implemented in the network.
  • Requesting a certificate fails with the following error message:
The operation timed out 0x80072ee2 (WinHttp: 12002 ERROR_WINHTTP_TIMEOUT)

Continue reading "Requesting certificates via the Network Device Enrollment Service (NDES) fails with error message "The operation timed out 0x80072ee2 (WinHttp: 12002 ERROR_WINHTTP_TIMEOUT)""

The Network Device Enrollment Service (NDES) logs the error message "The Network Device Enrollment Service cannot be started (0x80004005). Unspecified error"

Assume the following scenario:

  • An NDES server is configured on the network.
  • When accessing the NDES request web page (mscep) and the NDES administration web page (certsrv/mscep_admin), HTTP error 500 (Internal Server Error) is reported with error code 0x80004005.
  • Events No. 2 and No. 8 are logged in the application event log:
The Network Device Enrollment Service cannot be started (0x80004005). Unspecified error

Continue reading "The Network Device Enrollment Service (NDES) logs the error message "The Network Device Enrollment Service cannot be started (0x80004005). Unspecified error""

Overview of audit events generated by the certification authority

The following is an overview of the audit events generated by the certification authority in the Windows Event Viewer.

In contrast to operational events, which are often understood under the term "monitoring", auditing for the certification authority is the configuration of logging of security-relevant events.

Continue reading "Overview of audit events generated by the certification authority"

Overview of Windows events generated by the Certificate Enrollment Policy Web Service (CEP)

The following is an overview of the events generated by the Certificate Enrollment Policy Web Service (CEP) in the Windows Event Viewer.

The Certificate Enrollment Policy Web Service events are not officially documented. The following list was generated using the Windows Event Log Messages (WELM) tool.

Continue reading "Overview of Windows events generated by the Certificate Enrollment Policy Web Service (CEP)"

Overview of Windows events generated by the Certificate Enrollment Web Service (CES)

The following is an overview of the events generated by the Certificate Enrollment Web Service (CES) in the Windows Event Viewer.

The events of the Certificate Enrollment Web Service are not officially documented. The following list was generated using the Windows Event Log Messages (WELM) tool.

Continue reading "Overview of Windows events generated by the Certificate Enrollment Web Service (CES)"

Overview of Windows events generated by the Network Device Enrollment Service (NDES)

The following is an overview of the events generated by the Network Device Enrollment Service (NDES) in the Windows Event Viewer.

The events of the Network Device Enrollment Service are not officially documented. The following list was generated using the Windows Event Log Messages (WELM) tool.

Continue reading "Overview of Windows events generated by the Network Device Enrollment Service (NDES)"

Overview of Windows events generated by the Online Responder (OCSP)

The following is an overview of the events generated by the Online Responder (OCSP) in the Windows Event Viewer.

The events of the Online Responder are not officially documented. The following list was generated using the Windows Event Log Messages (WELM) tool.

Continue reading "Overview of Windows events generated by the Online Responder (OCSP)"

Performance problems with auditing of "Start and stop Active Directory Certificate Services"

When configuring the auditing settings of a certification authority, one is inclined to select the "Start and Stop Active Directory Certificate Services" option. However, this option may cause problems in some circumstances.

Continue reading "Performance problems with auditing of "Start and stop Active Directory Certificate Services""

Performing a functional test for a certification authority

After installing a certification authority, after migrating to a new server, or after more extensive maintenance work, an extensive functional test should be performed to ensure that all components of the certification authority are working as desired.

Continue reading "Performing a functional test for a certification authority"

The Network Device Enrollment Service (NDES) logs the error message "The Network Device Enrollment Service cannot be started (0x80070002). The system cannot find the file specified."

Assume the following scenario:

  • An NDES server is configured on the network.
  • HTTP error 500 (Internal Server Error) is reported when accessing the NDES request web page (mscep) and the NDES administration web page (certsrv/mscep_admin).
  • Event No. 2 is logged in the application event log:
The Network Device Enrollment Service cannot be started (0x80070002). The system cannot find the file specified.

Continue reading "The Network Device Enrollment Service (NDES) logs the error message "The Network Device Enrollment Service cannot be started (0x80070002). The system cannot find the file specified.""

The Network Device Enrollment Service (NDES) logs the error message "The Network Device Enrollment Service cannot retrieve one of its required certificates (0x80070057). The parameter is incorrect."

Assume the following scenario:

  • An NDES server is configured on the network.
  • HTTP error 500 (Internal Server Error) is reported when accessing the NDES request web page (mscep) and the NDES administration web page (certsrv/mscep_admin).
  • Events no. 2 and 10 are logged in the Application event log:
The Network Device Enrollment Service cannot be started (0x80070057). The parameter is incorrect.
The Network Device Enrollment Service cannot retrieve one of its required certificates (0x80070057). The parameter is incorrect.

Continue reading "The Network Device Enrollment Service (NDES) logs the error message "The Network Device Enrollment Service cannot retrieve one of its required certificates (0x80070057). The parameter is incorrect.""