Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
Automatic enrollment against the certification authority "MY_DOMAIN_NAME" for a certificate of type DomainController has failed. (<error code>) <error description>.
. Another certification authority will be tried.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is a Certificate Authority?
What is the role of the Winlogon service?
Error: 0x80094001 - The request subject name is invalid or too long. See ME275528.
Error: 0x80090020 - An internal error occurred. See ME313494. Solved by SP3.
I had this same problem on a Windows 2000 backup domain controller. The primary domain controller was also Windows 2000. I was unable to resolve it with any of the suggestions posted, so I placed a call to Microsoft. It turned out that at one time, I had a Certificate Authority (CA) installed on my system which no longer existed. When my new backup domain controller tried to authenticate with the AD, it would re-direct it to the non-existent CA. To remove an enterprise CA, I followed the instructions in ME889250. Since my CA was already gone, and what was left existed in AD only, I needed to follow steps 6 and on to clean up the AD. It is important to note that you will need the Microsoft Resource Kit for you Server OS. I have not experienced the errors since.
Some users suggested that installing the hotfix referenced by ME829589 helped them to resolve this problem.
See Error code 1722 and Error code 0x800706BA for information on error "The RPC server is unavailable".
This error appeared on a Domain Controller attempting to renew its certificate with an existing CA. The CA was running and was accessible by all other systems on the domain. The DC could ping the CA but neither server could initiate a TCP session with the other. Packet capture showed only ISAKMP traffic between the two boxes. Stopping the "IPSEC Policy Agent" service on the DC allowed the boxes to communicate (no restrictive IPSEC policies were set on the domain).
Woodrow Wayne Collins
Error: 0x80004005 = MAPI_E_CALL_FAILED or E_FAIL is a General unspecified failure, the method or call did not succeed and indicates failure. I saw mention of database being corrupt.
Christophe Lubrano di Ciccone
Error code: 0x800706ba - The RPC server is unavailable. Happens when a computer (A) providing the certificate at the root level is offline. Then, the domain controller is unable to obtain a personnal certificate. How to fix it : switch on the computer (A), or import the certificates exported previously.
|Private comment: Subscribers only. See example of private comment|
|Links: ME275528, ME313494, ME829589, ME889250, Error code 1722, Error code 0x800706BA|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated