| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 10 (0xA) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_CANNOT_BUILD_CERT_OR_CHAIN |
| Event text (English): | Active Directory Certificate Services were unable to build a new certificate or certificate chain: %1. |
| Event text (German): | Failed to create a new certificate or certificate chain: %1. |
Category: Events
Details of the event with ID 15 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 15 (0xF) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | Active Directory Certificate Services did not start: Version does not match certif.dll. |
| Event text (German): | The Active Directory certificate services have not been started: The version does not match "certif.dll". |
Details of the event with ID 16 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 16 (0x10) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | Active Directory Certificate Services did not start: Unable to initialize OLE: %1. |
| Event text (German): | Active Directory certificate services failed to start: OLE could not be initialized: %1. |
Details of the event with ID 5 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 5 (0x5) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_BAD_REGISTRY |
| Event text (English): | Active Directory Certificate Services could not find required registry information. The Active Directory Certificate Services may need to be reinstalled. |
| Event text (German): | The required registry information could not be found. The Active Directory certificate services may need to be reinstalled. |
Details of the event with ID 52 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 52 (0x34) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | The Network Device Enrollment Service policy module was started successfully. |
| Event text (German): | The Network Device Registration Service policy module has been started successfully. |
Details of the event with ID 53 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 53 (0x35) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | The Network Device Enrollment Service policy module could not be started (%1). %2 |
| Event text (German): | Failed to start the Network Device Registration Service policy module (%1). %2 |
Details of the event with ID 54 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 54 (0x36) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | The Network Device Enrollment Service policy module was stopped successfully. |
| Event text (German): | The policy module "Registration service for network devices" has been successfully completed. |
Details of the event with ID 55 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 55 (0x37) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | The Network Device Enrollment Service policy module could not be stopped (%1). %2 |
| Event text (German): | The policy module "Registration service for network devices" could not be terminated (%1). %2 |
Details of the event with ID 49 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 49 (0x31) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | EVENT_MSCEP_FAILED_DECRYPT_PASSWORD |
| Event text (English): | The Network Device Enrollment Service has failed to decrypt the encrypted password or the decrypted password's length does not match the one configured in the registry. To fix this, delete the EncryptedPassword entry in the registry. |
| Event text (German): | The encrypted password could not be decrypted by the network device registry service, or the length of the decrypted password does not match the configuration in the registry. Remove the EncryptedPassword entry from the registry to resolve the issue. |
Details of the event with ID 50 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 50 (0x32) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | The Network Device Enrollment Service is working in single password mode. The password can be used multiple times and will not expire. |
| Event text (German): | The network device registration service runs in single password mode. The password can be used multiple times and does not expire. |
Details of the event with ID 51 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 51 (0x33) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | EVENT_MSCEP_UNABLE_TO_CREATEORSET_REGKEY |
| Event text (English): | The Network Device Enrollment Service cannot create or modify the registry key "%1." Grant Read and Write permissions on the registry key "%2" to the account that the Network Device Enrollment Service is running as. |
| Event text (German): | The %1 registry key cannot be created or modified by the Network Devices Registration Service. Grant read and write permissions to the %2 registry key to the account running the Network Devices Registration Service. |
Details of the event with ID 43 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 43 (0x2B) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | EVENT_MSCEP_INVALID_USAGE_FOR_PASSWORD |
| Event text (English): | This password has already been used to request a (%1) certificate. Only one signing certificate and one exchange certificate can be issued per password. Obtain a new password to use with this request, or create a new request with a different key usage and the same password, then try again. |
| Event text (German): | This password has already been used to request a (%1) certificate. Only one signing certificate and one exchange certificate can be issued per password. Set a new password for this request or create a new request with a different key usage and the same password. Then repeat the process. |
Details of the event with ID 44 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 44 (0x2C) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | EVENT_MSCEP_GETCRL_FAILED |
| Event text (English): | The Network Device Enrollment Service cannot obtain the certificate revocation list (CRL) for key %1 from the certification authority. Verify that the CA service is running, the Network Device Enrollment Service account has Read permission on the CA service, and the CA service has successfully created the latest CRL. Use the Certification Authority management console to verify the permissions on the CA service. Use the command: Certutil -config "%2" -cainfo crl %3 to verify that the CA service has created the latest CRL. The error returned was (%4). %5 |
| Event text (German): | The certificate revocation list for the key %1 cannot be retrieved from the certification authority by the registration service for network devices. Ensure that the CA service is running, that the Network Device Enrollment Service account has read permission for the CA service, and that the CA service has successfully created the latest certificate revocation list. Use the Certificate Authority Management Console to check the permissions for the Certificate Authority Service. Use the command "Certutil -config "%2″ -cainfo crl %3" to ensure that the CA service has created the latest certificate revocation list. Error returned: (%4). %5 |
Details of the event with ID 45 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 45 (0x2D) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | EVENT_MSCEP_NOMATCH_ISSUERNAME_SERIALNUMBER |
| Event text (English): | The Network Device Enrollment Service cannot match the issuer name and serial number in the device request to any certification authority (CA) certificate. Verify that the device request contains the correct CA certificate information, then resubmit the request. |
| Event text (German): | The network device registration service cannot associate the issuer name and serial number in the device request with a CA certificate. Ensure that the device request contains the correct certificate authority certificate information and then resubmit the request. |
Details of the event with ID 46 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 46 (0x2E) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | EVENT_MSCEP_FAILED_HASH_ALGORITHM |
| Event text (English): | The Network Device Enrollment Service failed to load the hash algorithm specified at location %1. Use the command "certutil -v -csplist" to verify that the computer on which the Network Device Enrollment Service is installed supports the hash algorithm specified. Near the end of the command output, look for the section labeled "Hash Algorithms". If the algorithm specified in the registry is not listed, configure a different hash algorithm in the registry. The error returned was (%2). %3 |
| Event text (German): | The hash algorithm specified under "%1" could not be loaded by the registry service for network devices. Use the "certutil -v -csplist" command to ensure that the computer on which the Network Device Enrollment Service is installed supports the specified hash algorithm. Look for a section labeled "hash algorithms" at the end of the command output. If the algorithm specified in the registry is not listed, configure a different hash algorithm in the registry. Error returned: (%2). %3 |
English 
Deutsch