Event ID 13
Nov17

Event ID 13

KB ID 0000520  Problem Seen every few hours in the application log: Source: AutoEnrollment Description: Automatic certificate enrollment for the local system failed to enroll for one Domain Controller certificate (0x80070005). Access is denied. Solution 1. Go to your domain controller > Open Active Directory users and computers > Locate the CERTSVC_DCOM_ACCESS group. 2. Add in the “Domain Controllers” group. 3. On...

Read More
Certificate Services Error – ‘The Email name is unavailable and cannot be added to the Subject or Subject Alternate name’
Nov17

Certificate Services Error – ‘The Email name is unavailable and cannot be added to the Subject or Subject Alternate name’

KB ID 0001029 Problem Server: Windows Server 2012 R2 Client: Windows 8 Enterprise I was setting auto-enrollment this morning, and the computer certificates were getting issued but not the user ones. The policies were correct, the registry keys on the clients were correct, even RSOP told me the users ‘should’ be getting certificates. However nothing was working so I decided to ‘manually enroll’ and this...

Read More
Deploying Certificates via ‘Auto Enrollment’
Nov17

Deploying Certificates via ‘Auto Enrollment’

KB ID 0000919 Problem SHA CERTIFICATE WARNING: Note This article was written some time ago, ensure your CA environment does NOT use SHA1 for your certificates, if it does, Please visit the following link for migration instructions; Upgrade Your Microsoft PKI Environment to SHA2 (SHA256) I need to setup wireless authentication based on computer certificates, I’ve done similar jobs before by manually issuing certificates for Cisco...

Read More