Anmelden
 
HomeLibraryDownloadsSupportWebcasts & EventsCommunityForenBlogs
Ressourcen für IT-Professionals >
> 
> 
Certification Authority Web Enrollment configuration failed

Answered Certification Authority Web Enrollment configuration failed

  • Donnerstag, 8. November 2012 12:50
     
     
    Anmelden
    0

    Hello all,

    I have Windows 2008 server and I am trying to install AD Certificate Services with Web enrollment. However, I am getting this error on the screen:

    Certification Authority Web Enrollment configuration failed

    I tried looking up forums and the suggestion to Modify SetupStatus at HKLM\System\CurrentControlSet\Services\CertSvc\Configuration to 0×6001. This is already set to 0x6001 in my case. For more details, I am copying here the logs from the ServerManager. Appreciate any help on this, thanks.

    220: 2012-11-08 17:27:32.103 [Provider]                  [STAT] For 'CertificateAuthority':
    220: 2012-11-08 17:27:32.103 [Provider]                  [STAT] Configuration took '3.7340666' second(s) total.
    220: 2012-11-08 17:27:32.104 [Provider]                  Begin configuration of 'CertificateAuthorityWebEnrollment'...
    220: 2012-11-08 17:27:32.104 [Provider]                  Configure: 'CertificateAuthorityWebEnrollment'
    220: 2012-11-08 17:27:32.104 [CAWebProxyManager]         Sync: Creating ICertSrvSetup
    220: 2012-11-08 17:27:32.104 [CAWebProxyManager]         Sync: Initializing defaults
    220: 2012-11-08 17:27:37.832 [Provider] Error (Id=0) System.IO.FileNotFoundException: The system cannot find the file specified. (Exception from HRESULT: 0x80070002)
       at Microsoft.CertificateServices.Setup.Interop.CCertSrvSetupClass.Install()
       at Microsoft.Windows.ServerManager.CertificateServer.CertificateServerRoleProvider.Configure(Object clientContext, String hostComputerName, XDocument guest, String guestIdentity)
    220: 2012-11-08 17:27:37.832 [Provider]                  CAErrorID: 0, CAErrorString: ''
    220: 2012-11-08 17:27:37.832 [Provider]                  Adding error message.
    220: 2012-11-08 17:27:37.833 [Provider]                  [STAT] For 'CertificateAuthorityWebEnrollment':
    220: 2012-11-08 17:27:37.833 [Provider]                  [STAT] Configuration took '5.7291484' second(s) total.
    220: 2012-11-08 17:27:37.833 [Provider]                  
    [STAT] ---- CBS Session Consolidation -----
    [STAT] For
              'CertificateAuthority',
              'CertificateAuthorityWebEnrollment'[STAT] installation(s) took '101.8051102' second(s) total.
    [STAT] Configuration(s) took '9.4651738' second(s) total.
    [STAT] Total time: '111.270284' second(s).

    220: 2012-11-08 17:27:37.833 [Provider]                  Sync Result - Success: True, RebootRequired: False, Id:

    /RMTInstances/http___schemas.microsoft.com_sdm_Windows_ServerManager_CertificateServer_2005_09_CertificateAuthorityType_abfdb47e-94b0-4b8b-9d98-11645b750339.xml
    220: 2012-11-08 17:27:37.833 [Provider]                  Sync Message - OperationKind: Install, MessageType: Information, MessageCode: 0, Message: <null>, AdditionalMessage: <null>
    220: 2012-11-08 17:27:37.834 [Provider]                  Sync Message - OperationKind: Configuration, MessageType: Information, MessageCode: 0, Message: <null>, AdditionalMessage: <null>
    220: 2012-11-08 17:27:37.834 [Provider]                  Sync Result - Success: True, RebootRequired: False, Id:

    /RMTInstances/http___schemas.microsoft.com_sdm_Windows_ServerManager_CertificateServer_2005_09_CertificateAuthorityWebEnrollmentType_f04cf3f2-e93d-4370-8973-d8edb3de63c7.xml
    220: 2012-11-08 17:27:37.834 [Provider]                  Sync Message - OperationKind: Install, MessageType: Information, MessageCode: 0, Message: <null>, AdditionalMessage: <null>
    220: 2012-11-08 17:27:37.834 [Provider] Warning (Id=0) Sync Message - OperationKind: Configuration, MessageType: Error, MessageCode: 0, Message: Certification Authority Web Enrollment

    configuration failed., AdditionalMessage: <null>
    220: 2012-11-08 17:27:37.834 [Provider]                  Sync Message - OperationKind: Configuration, MessageType: Information, MessageCode: 0, Message: <null>, AdditionalMessage: <null>
    220: 2012-11-08 17:27:38.036 [InstallationProgressPage]  Sync operation completed
    220: 2012-11-08 17:27:38.037 [InstallationProgressPage]  Performing post install/uninstall discovery...
    220: 2012-11-08 17:27:38.336 [CBS]                       LastModified CBS Time (UTC): 11/08/2012 11:57:25
    220: 2012-11-08 17:27:38.358 [Provider]                  C:\Windows\system32\ServerManager\Cache\CbsUpdateState.bin does not exist.
    220: 2012-11-08 17:27:38.374 [CBS]                       IsCacheStillGood: False.
    220: 2012-11-08 17:27:38.375 [CBS]                       CreateSessionAndPackage: begin
    220: 2012-11-08 17:27:39.611 [CBS]                       CreateSessionAndPackage: done


    • Bearbeitet sburnwal Donnerstag, 8. November 2012 12:52
    • Typ geändert pbbergsMVP Donnerstag, 8. November 2012 12:53
    • Verschoben pbbergsMVP Donnerstag, 8. November 2012 12:54 (From:Directory Services)
    •  
     

Alle Antworten

  • Donnerstag, 8. November 2012 12:53
     
     
    Anmelden
    0

    This question belongs in the Security forum.  I will move it there.

    --
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    http://www.pbbergs.com    Twitter @pbbergs
    http://blogs.dirteam.com/blogs/paulbergson

    Please no e-mails, any questions should be posted in the NewsGroup. This posting is provided "AS IS" with no warranties, and confers no rights.

     
  • Freitag, 9. November 2012 06:48
    Moderator
     
     
    Anmelden
    0
    Hi,

    Thanks for posting in Microsoft TechNet forums.

    I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
     
    Thank you for your understanding and support.

    Regards

    Kevin
     
  • Freitag, 9. November 2012 09:07
     
     Vorgeschlagene Antwort
    Anmelden
    0

    Hi,

    Please test if we are able to install only AD Certificate Services without Web enrollment. If we can, then please install the web enrollment. If not, please check System and Application log to see if there are some event related to CA installation.

    Best regards, Jason Mei Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

     
  • Montag, 12. November 2012 13:42
     
     Beantwortet
    Anmelden
    0
    I am able to install AD Certificate Services without Web Enrollment. When trying to install web enrollment separately for the role, I get the same error. I am using the default builtin Administrator account to do this, fyi. I am from Cisco and we have unlimited support license, so if this is not resolved here, I would seek MS support.
     
  • Dienstag, 13. November 2012 06:46
     
     
    Anmelden
    0

    Hi,

    Regarding current situation, we may need more infromaiton like System and Application log to see if there are some useful informaiton for this error.

    So i agree to create call to MS support.

    Best regards, Jason Mei Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

     
  • Montag, 21. Januar 2013 04:57
     
     
    Anmelden
    0

    Hello everybody,

    did you get an answer for your problem from MS ?

    I have exactly the same prob as you.

    Greets

    Beowulf