| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 127 (0x7F) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_W_EXPIRATION_KRA_CERT |
| Event text (English): | Key recovery certificate %1 is about to expire soon and will not be used upon expiration. Contact your adminstrator to renew this certificate. %2 %3 |
| Event text (German): | The key recovery certificate %1 is about to expire and will no longer be used. Ask the administrator to renew the certificate. %2 %3 |
Tag: Event display
Details of the event with ID 128 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 128 (0x80) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_W_REQUEST_CONTAINS_AKI |
| Event text (English): | An Authority Key Identifier was passed as part of the certificate request %1. This feature has not been enabled. To enable specifying a CA key for certificate signing, run: "certutil -setreg ca\UseDefinedCACertInRequest 1" and then restart the service. |
| Event text (German): | A job key identifier was passed as part of the %1 certificate request. This feature is not enabled. To specify a certificate authority key for certificate signing, run the certutil -setreg ca\UseDefinedCACertInRequest 1 command and restart the service. |
Details of the event with ID 129 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 129 (0x81) |
| Event log: | Application |
| Event type: | Warning |
| Event text (English): | An invalid OID has been detected in the EnabledEKUForDefinedCACert configuration setting. To resolve, run: "certutil -getreg ca\EnabledEKUForDefinedCACert" to identify the invalid OID and correct it. The default OID ("1.3.6.1.5.5.7.3.9") will be used. |
| Event text (German): | An invalid OID was detected in the "EnabledEKUForDefinedCACert" configuration setting. To correct this, execute the command "certutil -getreg ca\EnabledEKUForDefinedCACert" to determine and correct the invalid OID. The default OID ("1.3.6.1.5.5.7.3.9") is used. |
Details of the event with ID 130 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 130 (0x82) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_CRL_CREATION |
| Event text (English): | Active Directory Certificate Services could not create a certificate revocation list. %1. This may cause applications that need to check the revocation status of certificates issued by this CA to fail. You can recreate the certificate revocation list manually by running the following command: "certutil -CRL". If the problem persists, restart Certificate Services. |
| Event text (German): | No certificate revocation list could be created by Active Directory Certificate Services. %1. This may cause an error to occur in applications that require checking the revocation status of certificates issued by this certificate authority. The certificate revocation list can be manually recreated by running the following command: "certutil -CRL". If the problem persists, restart Certificate Services. |
Details of the event with ID 131 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 131 (0x83) |
| Event log: | Application |
| Event type: | Warning |
| Event text (English): | An invalid OID has been detected in the EKUOIDsForPublishExpiredCertInCRL configuration setting. To resolve, run: "certutil -getreg ca\EKUOIDsForPublishExpiredCertInCRL" to identify the invalid OID and correct it. The default OIDs ("1.3.6.1.5.5.7.3.3" and "1.3.6.1.4.1.311.61.1.1") will be used. |
| Event text (German): | An invalid OID was detected in the EKUOIDsForPublishExpiredCertInCRL configuration setting. To fix it, run the certutil -getreg ca\EKUOIDsForPublishExpiredCertInCRL command to detect and correct the invalid OID. The default OIDs ("1.3.6.1.5.7.3.3" and "1.3.6.1.4.1.311.61.1.1") are used. |
Details of the event with ID 132 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 132 (0x84) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_AES_ARCHIVAL_WITH_CAPI_PROV |
| Event text (English): | The certification authority (CA) was unable to perform a decryption operation. This error can occur when an advanced encryption algorithm such as Advanced Encryption Standard (AES) is used and the CA has not been configured to use a CryptoAPI Next Generation (CNG) key storage provider. If this error occurred during certificate enrollment, check the certificate template to ensure that advanced encryption for key archival is not enabled. |
| Event text (German): | A decryption process could not be performed by the certification authority. This error can occur if an advanced encryption algorithm such as the Advanced Encryption Standard (AES) is used and the certificate authority is not configured to use a CNG key storage provider. If this error occurred during certificate enrollment, check the certificate template and make sure that advanced encryption is not enabled for key archiving. |
Details of the event with ID 133 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 133 (0x85) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | The certification authority (CA) failed to encode a server extension required to validate a certificate or certification revocation list (CRL). The CA will not issue any certificates or CRLs that do not contain this extension. To correct this problem, use the Certification Authority snap-in to remove any Unicode characters in the URLs for the AIA, CDP, and IDP extensions, then restart the CA. |
| Event text (German): | The server extension required for the verification of a certificate or revocation list could not be encoded by the certification authority. The certification authority will not issue certificates or revocation lists that do not contain this extension. To resolve this issue, use the CA snap-in to remove all Unicode characters in the URLs for the "AIA", "CDP" and "IDP" extensions and then restart the CA. |
Details of the event with ID 134 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 134 (0x86) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | A certificate in the chain for CA certificate %3 for %1 has expired. %2. |
| Event text (German): | A certificate in the chain for the certification authority certificate "%3" for "%1" has expired. %2. |
Details of the event with ID 126 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 126 (0x7E) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_CA_ADVANCED_SETTING_NOT_UPDATED |
| Event text (English): | Current information about advanced features supported by this Certification Authority is not available from the domain controller. Stop and restart Certificate Services in order to update this information. %1 |
| Event text (German): | No up-to-date information about advanced features supported by this certificate authority is available on the domain controller. Stop and restart Certificate Services to update the information. %1 |
Details of the event with ID 117 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 117 (0x75) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_W_REVOCATION_PAGE_NOT_UPGRADED |
| Event text (English): | A portion of the Active Directory Certificate Services upgrade failed: Could not create revocation page. %1 |
| Event text (German): | Partial Active Directory Certificate Services upgrade error: failed to create the revocation page. %1 |
Details of the event with ID 118 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 118 (0x76) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_W_KEY_CONTAINERS_NOT_UPGRADED |
| Event text (English): | A portion of the Active Directory Certificate Services upgrade failed: Could not upgrade key containers. %1 |
| Event text (German): | Error during part of the Active Directory Certificate Services upgrade: The key containers could not be updated. %1 |
Details of the event with ID 121 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 121 (0x79) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_W_TEMPLATES_NOT_UPGRADED |
| Event text (English): | A portion of the Active Directory Certificate Services upgrade failed: Could not install new templates. %1 |
| Event text (German): | Partial Active Directory Certificate Services upgrade error: failed to install new templates. %1 |
Details of the event with ID 122 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 122 (0x7A) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_W_SERVICE_DESCRIPTION_NOT_UPGRADED |
| Event text (English): | A portion of the Active Directory Certificate Services upgrade failed: Could not update service description. %1 |
| Event text (German): | Partial Active Directory certificate services upgrade error: failed to update service description. %1 |
Details of the event with ID 123 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 123 (0x7B) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_W_SECURITY_SETTINGS_NOT_UPGRADED |
| Event text (English): | A portion of the Active Directory Certificate Services upgrade failed: Could not update security settings. %1 |
| Event text (German): | Partial Active Directory Certificate Services upgrade error: failed to upgrade security settings. %1 |
Details of the event with ID 124 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 124 (0x7C) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | Active Directory Certificate Services upgrade succeeded. Active Directory Certificate Services settings have been upgraded successfully. |
| Event text (German): | The upgrade of Active Directory certificate services was successful. The Active Directory Certificate Services settings were successfully upgraded. |
English 
Deutsch