AD CS Registry Settings

Applies To: Windows Server 2008

Active Directory Certificate Services (AD CS) records critical configuration settings in the registry and may not start or function properly if this information becomes corrupted or is deleted.

Events

Event ID	Source	Message
5	Microsoft-Windows-CertificationAuthority	Active Directory Certificate Services could not find required registry information. The certification authority may need to be reinstalled.
19	Microsoft-Windows-CertificationAuthority	Active Directory Certificate Services did not start: The Subject Name Template string in the registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration\%1\SubjectTemplate is invalid. An example of a valid string is: CommonName OrganizationalUnit Organization Locality State Country
20	Microsoft-Windows-CertificationAuthority	Active Directory Certificate Services did not start: The Certificate Date Validity Period string in the registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration\%1\ValidityPeriod is invalid. Valid strings are "Seconds", "Minutes", "Hours", "Days", "Weeks", "Months" and "Years".
28	Microsoft-Windows-CertificationAuthority	Active Directory Certificate Services did not start: The Certificate Revocation List Period string is invalid in the registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration\%1\CRLPeriod. Valid strings are "Seconds", "Minutes", "Hours", "Days", "Weeks", "Months" and "Years".
95	Microsoft-Windows-CertificationAuthority	Security permissions are corrupted or missing. Active Directory Certificate Services needs to be reinstalled.

Related Management Information

AD CS Certification Authority (CA)

Active Directory Certificate Services