Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
Event ID: | 8 (0x8) |
Event log: | Application |
Event type: | Error |
Symbolic Name: | EVENT_MSCEP_FAILED_CA_INFO |
Event text (English): | The Network Device Enrollment Service cannot retrieve information about the certification authority (%1). %2 |
Event text (German): | The information on the certification authority (%1) cannot be retrieved by the registration service for network devices. %2 |
Parameter
The parameters contained in the event text are filled with the following fields:
- %1: ErrorCode (win:UnicodeString)
- %2: ErrorMessage (win:UnicodeString)
The Network Device Enrollment Service (NDES) provides a way for devices that do not have an identifier in Active Directory (for example, network devices such as routers, switches, printers, thin clients, or smartphones and tablets) to request certificates from a certification authority. For a more detailed description, see the article "Network Device Enrollment Service (NDES) Basics„.
Example events
The Network Device Enrollment Service cannot retrieve information about the certification authority (0x80004005). Unspecified error
Description
Do you know TameMyCerts? TameMyCerts is an add-on for the Microsoft certification authority (Active Directory Certificate Services). It extends the function of the certification authority and enables the Application of regulationsto realize the secure automation of certificate issuance. TameMyCerts is unique in the Microsoft ecosystem, has already proven itself in countless companies around the world and is available under a free license. It can downloaded via GitHub and can be used free of charge. Professional maintenance is also offered.
The event usually occurs together with the "The Network Device Enrollment Service cannot be started" on.
For possible causes, see the article "The Network Device Enrollment Service (NDES) logs the error message "The Network Device Enrollment Service cannot be started (0x80004005). Unspecified error".„.
Safety assessment
The security assessment is based on the three dimensions of confidentiality, integrity and availability.
If this event occurs, there is usually no breach of confidentiality, but availability is affected as no certificates can be requested via the interface.