A
alfa21
Hi,
We are having problems to issue computer certificates, add / delete templates in the CA. We receive the following error:
The template information on the CA cannot be modified at this time. This is most likely because the CA service is not running or there are replication delays.
Access is denied. 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
CA as subordinate is running on Windows 2012 R2, and Root CA is Offline. AD Replication is OK.
I run debug, and below is the output.
========================================================================
Opened Log: 7/27/2018 3:46 PM 39.016s
GMT + 2.00
certca.dll: 6.3:9600.17415 retail
certsrv.exe: 6.3:9600.18344 retail
515.1505.0:<2018/7/27, 15:47:3>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
501.292.0:<2018/7/27, 15:47:3>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
Closed Log: 7/27/2018 3:47 PM 21.314s
========================================================================
Opened Log: 7/27/2018 3:47 PM 51.675s
GMT + 2.00
certca.dll: 6.3:9600.17415 retail
certsrv.exe: 6.3:9600.18344 retail
3109.1310.0:<2018/7/27, 15:48:1>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): Use Count
3109.1311.0:<2018/7/27, 15:48:1>: 0x8 (WIN32: 8 ERROR_NOT_ENOUGH_MEMORY)
3109.1312.0:<2018/7/27, 15:48:1>: 0x0 (WIN32: 0)
419.6895.0:<2018/7/27, 15:48:1>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): crypto::FS_PROP_GET_KEY_USAGE_COUNT
CertSrv: Certification Authority Service Stopped
503.2205.0:<2018/7/27, 15:48:2>: 0x0 (WIN32: 0)
CertSrv: Exit Status = S_OK
========================================================================
Opened Log: 7/27/2018 3:48 PM 02.796s
GMT + 2.00
certca.dll: 6.3:9600.17415 retail
certsrv.exe: 6.3:9600.18344 retail
503.1861.0:<2018/7/27, 15:48:2>: 0x0 (WIN32: 0)
508.1341.0:<2018/7/27, 15:48:2>: 0x2 (WIN32: 2 ERROR_FILE_NOT_FOUND): DBMaxReadSessionCount
468.129.0:<2018/7/27, 15:48:2>: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND)
437.625.0:<2018/7/27, 15:48:2>: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND): OfficerRights
437.625.0:<2018/7/27, 15:48:2>: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND): EnrollmentAgentRights
437.625.0:<2018/7/27, 15:48:2>: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND): RoleSeparationEnabled
CertSrv: Opening Database C:\Windows\system32\CertLog\CompanySubordinateCA1.edb
CertSrv: Database open
420.385.0:<2018/7/27, 15:48:3>: 0x2 (WIN32: 2 ERROR_FILE_NOT_FOUND)
3109.1310.0:<2018/7/27, 15:48:5>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): Use Count
3109.1311.0:<2018/7/27, 15:48:5>: 0x8 (WIN32: 8 ERROR_NOT_ENOUGH_MEMORY)
3109.1312.0:<2018/7/27, 15:48:5>: 0x0 (WIN32: 0)
419.6895.0:<2018/7/27, 15:48:5>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): crypto::FS_PROP_GET_KEY_USAGE_COUNT
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyAdmins
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): SCCMIISCert
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): SCCMDPCertificate
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): SCCMClientCertificate
1006.844.0:<2018/7/27, 15:48:5>: 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND): msPKI-Key-Security-Descriptor
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyILO
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): Copy of Temporary Company Smartcard user
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): Company_DirectAccessIPsec
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): RDPAuthentication
1006.844.0:<2018/7/27, 15:48:5>: 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND): msPKI-Key-Security-Descriptor
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): ADFSServerAuth
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyActiveSyncUsertest
1006.844.0:<2018/7/27, 15:48:5>: 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND): msPKI-Key-Security-Descriptor
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): WeblogicServer
1006.844.0:<2018/7/27, 15:48:5>: 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND): msPKI-Key-Security-Descriptor
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyKIPSServer
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanySmartcardUser
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyActiveSyncUser
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyVPNComputer
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyRTGSUser
1006.844.0:<2018/7/27, 15:48:5>: 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND): msPKI-Key-Security-Descriptor
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyWebServer
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyEnrollmentAgent
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): TemporaryCompanySmartcarduser
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): KerberosAuthentication
CertSrv: Policy Module Enabled (Windows default)
CertSrv: Exit Module[1] Enabled: 27f (Windows default)
437.625.0:<2018/7/27, 15:48:5>: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND): EndorsementKeyListDirectories
3109.1310.0:<2018/7/27, 15:48:5>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): Use Count
3109.1311.0:<2018/7/27, 15:48:5>: 0x8 (WIN32: 8 ERROR_NOT_ENOUGH_MEMORY)
3109.1312.0:<2018/7/27, 15:48:5>: 0x0 (WIN32: 0)
419.6895.0:<2018/7/27, 15:48:5>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): crypto::FS_PROP_GET_KEY_USAGE_COUNT
CertSrv: Certification Authority Service Ready (3s) DC=DC1.Company-kos.org ...
CertSrv: Base CRL Publishing Enabled, TimeOut=668296s, 1 Weeks, 17 Hours, 38 Minutes, 16 Seconds
515.1505.0:<2018/7/27, 15:48:16>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
501.292.0:<2018/7/27, 15:48:16>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
515.1505.0:<2018/7/27, 15:48:23>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
501.292.0:<2018/7/27, 15:48:23>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
Closed Log: 7/27/2018 3:48 PM 41.156s
I really appreciate any help
alfa21
Continue reading...
We are having problems to issue computer certificates, add / delete templates in the CA. We receive the following error:
The template information on the CA cannot be modified at this time. This is most likely because the CA service is not running or there are replication delays.
Access is denied. 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
CA as subordinate is running on Windows 2012 R2, and Root CA is Offline. AD Replication is OK.
I run debug, and below is the output.
========================================================================
Opened Log: 7/27/2018 3:46 PM 39.016s
GMT + 2.00
certca.dll: 6.3:9600.17415 retail
certsrv.exe: 6.3:9600.18344 retail
515.1505.0:<2018/7/27, 15:47:3>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
501.292.0:<2018/7/27, 15:47:3>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
Closed Log: 7/27/2018 3:47 PM 21.314s
========================================================================
Opened Log: 7/27/2018 3:47 PM 51.675s
GMT + 2.00
certca.dll: 6.3:9600.17415 retail
certsrv.exe: 6.3:9600.18344 retail
3109.1310.0:<2018/7/27, 15:48:1>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): Use Count
3109.1311.0:<2018/7/27, 15:48:1>: 0x8 (WIN32: 8 ERROR_NOT_ENOUGH_MEMORY)
3109.1312.0:<2018/7/27, 15:48:1>: 0x0 (WIN32: 0)
419.6895.0:<2018/7/27, 15:48:1>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): crypto::FS_PROP_GET_KEY_USAGE_COUNT
CertSrv: Certification Authority Service Stopped
503.2205.0:<2018/7/27, 15:48:2>: 0x0 (WIN32: 0)
CertSrv: Exit Status = S_OK
========================================================================
Opened Log: 7/27/2018 3:48 PM 02.796s
GMT + 2.00
certca.dll: 6.3:9600.17415 retail
certsrv.exe: 6.3:9600.18344 retail
503.1861.0:<2018/7/27, 15:48:2>: 0x0 (WIN32: 0)
508.1341.0:<2018/7/27, 15:48:2>: 0x2 (WIN32: 2 ERROR_FILE_NOT_FOUND): DBMaxReadSessionCount
468.129.0:<2018/7/27, 15:48:2>: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND)
437.625.0:<2018/7/27, 15:48:2>: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND): OfficerRights
437.625.0:<2018/7/27, 15:48:2>: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND): EnrollmentAgentRights
437.625.0:<2018/7/27, 15:48:2>: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND): RoleSeparationEnabled
CertSrv: Opening Database C:\Windows\system32\CertLog\CompanySubordinateCA1.edb
CertSrv: Database open
420.385.0:<2018/7/27, 15:48:3>: 0x2 (WIN32: 2 ERROR_FILE_NOT_FOUND)
3109.1310.0:<2018/7/27, 15:48:5>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): Use Count
3109.1311.0:<2018/7/27, 15:48:5>: 0x8 (WIN32: 8 ERROR_NOT_ENOUGH_MEMORY)
3109.1312.0:<2018/7/27, 15:48:5>: 0x0 (WIN32: 0)
419.6895.0:<2018/7/27, 15:48:5>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): crypto::FS_PROP_GET_KEY_USAGE_COUNT
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyAdmins
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): SCCMIISCert
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): SCCMDPCertificate
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): SCCMClientCertificate
1006.844.0:<2018/7/27, 15:48:5>: 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND): msPKI-Key-Security-Descriptor
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyILO
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): Copy of Temporary Company Smartcard user
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): Company_DirectAccessIPsec
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): RDPAuthentication
1006.844.0:<2018/7/27, 15:48:5>: 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND): msPKI-Key-Security-Descriptor
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): ADFSServerAuth
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyActiveSyncUsertest
1006.844.0:<2018/7/27, 15:48:5>: 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND): msPKI-Key-Security-Descriptor
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): WeblogicServer
1006.844.0:<2018/7/27, 15:48:5>: 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND): msPKI-Key-Security-Descriptor
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyKIPSServer
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanySmartcardUser
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyActiveSyncUser
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyVPNComputer
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyRTGSUser
1006.844.0:<2018/7/27, 15:48:5>: 0x80070490 (WIN32: 1168 ERROR_NOT_FOUND): msPKI-Key-Security-Descriptor
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyWebServer
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): CompanyEnrollmentAgent
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): TemporaryCompanySmartcarduser
1004.5464.0:<2018/7/27, 15:48:5>: 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE): KerberosAuthentication
CertSrv: Policy Module Enabled (Windows default)
CertSrv: Exit Module[1] Enabled: 27f (Windows default)
437.625.0:<2018/7/27, 15:48:5>: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND): EndorsementKeyListDirectories
3109.1310.0:<2018/7/27, 15:48:5>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): Use Count
3109.1311.0:<2018/7/27, 15:48:5>: 0x8 (WIN32: 8 ERROR_NOT_ENOUGH_MEMORY)
3109.1312.0:<2018/7/27, 15:48:5>: 0x0 (WIN32: 0)
419.6895.0:<2018/7/27, 15:48:5>: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED): crypto::FS_PROP_GET_KEY_USAGE_COUNT
CertSrv: Certification Authority Service Ready (3s) DC=DC1.Company-kos.org ...
CertSrv: Base CRL Publishing Enabled, TimeOut=668296s, 1 Weeks, 17 Hours, 38 Minutes, 16 Seconds
515.1505.0:<2018/7/27, 15:48:16>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
501.292.0:<2018/7/27, 15:48:16>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
515.1505.0:<2018/7/27, 15:48:23>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
501.292.0:<2018/7/27, 15:48:23>: 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)
Closed Log: 7/27/2018 3:48 PM 41.156s
I really appreciate any help
alfa21
Continue reading...