| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 106 (0x6A) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_E_CANNOT_ADD_MISSING_CA_CERT |
| Event text (English): | Active Directory Certificate Services cannot add certificate %1 to %2. %3. %4. |
| Event text (German): | The certificate %1 cannot be added to %2 by the Active Directory certificate services. %3. %4. |
Author: Uwe Gradenegger
Details of the event with ID 105 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 105 (0x69) |
| Event log: | Application |
| Event type: | Information |
| Symbolic Name: | MSG_E_DELETED_INVALID_CA_CERT |
| Event text (English): | Active Directory Certificate Services deleted invalid certificate %1 from %2. |
| Event text (German): | Invalid certificate %1 was deleted from %2 by Active Directory Certificate Services. |
Details of the event with ID 104 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 104 (0x68) |
| Event log: | Application |
| Event type: | Information |
| Symbolic Name: | MSG_E_ADDED_MISSING_CA_CERT |
| Event text (English): | Active Directory Certificate Services published certificate %1 to %2. |
| Event text (German): | The certificate %1 was published in %2 by Active Directory Certificate Services. |
Details of the event with ID 103 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 103 (0x67) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_E_MISSING_POLICY_ROOT |
| Event text (English): | Active Directory Certificate Services added the root certificate of certificate chain %1 to the downloaded Trusted Root Certification Authorities Enterprise store on the CA computer. This store will be updated from the Certification Authorities container in Active Directory the next time Group Policy is applied. To verify that the CA certificate is published correctly in Active Directory, run the following command: certutil -viewstore "%2" (you must include the quotation marks when you run this command). If the root CA certificate is not present, use the Certificates console on the root CA computer to export the certificate to a file, and then run the following command to publish it to Active Directory: Certutil -dspublish rtificatefilename% Root. |
| Event text (German): | The root certificate of the certificate chain %1 has been downloaded to the company store of the trusted root certification authorities on the certification authority computer. This store will be updated by the CA container in Active Directory the next time the group policy is applied. Run the following command to ensure that the root CA certificate has been correctly published to Active Directory: certutil -viewstore "%2" (you must also enter the quotation marks when running the command). If the root CA certificate does not exist, use the certificate console on the certification root machine to export the certificate to a file. Then run the following command to publish the certificate in Active Directory: Certutil -dspublish rtificatefilename% Root. |
Details of the event with ID 102 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 102 (0x66) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_CROSS_CERT_EXTENSION_CONFLICT |
| Event text (English): | Active Directory Certificate Services could not create cross certificate %1 to certify its own root certificates. The %2 extension is inconsistent. %3. %4. |
| Event text (German): | Active Directory Certificate Services could not create an overarching %1 certificate to certify its own root certificates. The %2 extension is inconsistent. %3. %4. |
Details of the event with ID 101 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 101 (0x65) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | Active Directory Certificate Services created CA cross certificate %2 for %1. |
| Event text (German): | A comprehensive certification authority certificate %2 was created for %1. |
Details of the event with ID 100 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 100 (0x64) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_CA_CERT_INVALID |
| Event text (English): | Active Directory Certificate Services did not start: Could not load or verify the current CA certificate. %1 %2. |
| Event text (German): | The Active Directory certificate services were not started: The current certification authority certificate could not be loaded or verified. %1 %2. |
Details of the event with ID 99 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 99 (0x63) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_CANNOT_CREATE_CROSS_CERT |
| Event text (English): | Active Directory Certificate Services could not create cross certificate %1 to certify its own root certificates. %2. %3. |
| Event text (German): | Active Directory Certificate Services could not create a comprehensive certificate %1 to certify its own root certificates. %2. %3. |
Details of the event with ID 98 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 98 (0x62) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_TOO_MANY_KRA_INVALID |
| Event text (English): | Active Directory Certificate Services encountered errors validating configured key recovery certificates. Requests to archive private keys will no longer be accepted. |
| Event text (German): | An error occurred while loading configured key recovery certificates. Private key archiving requests are no longer accepted. |
Details of the event with ID 97 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 97 (0x61) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_CLAMPED_BY_CA_CERT |
| Event text (English): | Active Directory Certificate Services %1 will reduce the maximum lifetime of the issued certificate for request %2 because the CA certificate lifetime is shorter than the registry validity period. Consider renewing the CA certificate or reducing the registry validity period. |
| Event text (German): | From Active Directory Certificate Services %1, the maximum validity period of the issued certificate for request %2 is reduced because the validity period of the certificate authority certificate is shorter than the registration validity period. You should renew the certification authority certificate or shorten the registration validity period. |
Details of the event with ID 96 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 96 (0x60) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_CANNOT_CREATE_XCHG_CERT |
| Event text (English): | Active Directory Certificate Services could not create an encryption certificate. %1. %2. |
| Event text (German): | No encryption certificate could be created by Active Directory Certificate Services. %1. %2. |
Details of the event with ID 95 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 95 (0x5F) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_BAD_PERMISSIONS |
| Event text (English): | Security permissions are corrupted or missing. The Active Directory Certificate Services may need to be reinstalled. |
| Event text (German): | The security authorizations are damaged or missing. The Active Directory certificate services may need to be reinstalled. |
Details of the event with ID 94 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 94 (0x5E) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_CA_CERT_NO_AUTH_STORE |
| Event text (English): | Active Directory Certificate Services %1 cannot open the certificate store at CN=NTAuthCertificates,CN=Public Key Services,CN=Services in the Active Directory's configuration container. |
| Event text (German): | The certificate store under "CN=NTAuthCertificates,CN=Public Key Services,CN=Services" in the Active Directory configuration container cannot be opened by Active Directory Certificate Services %1. |
Details of the event with ID 93 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 93 (0x5D) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_CA_CERT_NO_IN_AUTH |
| Event text (English): | The certificate (#%1) of Active Directory Certificate Services %2 does not exist in the certificate store at CN=NTAuthCertificates,CN=Public Key Services,CN=Services in the Active Directory's configuration container. The directory replication may not be completed. |
| Event text (German): | The certificate (#%1) of Active Directory Certificate Services %2 does not exist in the certificate store under "CN=NTAuthCertificates,CN=Public Key Services,CN=Services" in the Active Directory configuration container. Directory replication may not have been completed. |
Details of the event with ID 92 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 92 (0x5C) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | Active Directory Certificate Services could not update security permissions. %1 |
| Event text (German): | The security permissions could not be updated. %1 |
English 
Deutsch