Thursday, August 7, 2008

Certificate Services unable to start

If you are unable to start certificate services on your CA server and receiving following errors in your CA event viewer

Event Type: Error

Event Source: CertSvc

Event Category: None

Event ID: 100

Date: 8/7/2008

Time: 4:44:20 PM

User: N/A

Computer: XXXXXXXX

Description:

Certificate Services did not start: Could not load or verify the current CA certificate. XXXX Issuing CA The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning

Event Source: CertSvc

Event Category: None

Event ID: 48

Date: 8/7/2008

Time: 4:44:20 PM

User: N/A

Computer: XXXXXX

Description:

Revocation status for a certificate in the chain for CA certificate 0 for XXXX Issuing CA could not be verified because a server is currently unavailable. The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

This issue should be occurring because CA is not able to find the CRL. For fixing this issue try to run following command on CA server

certutil –setreg ca\CRLFlags +CRLF_REVCHECK_IGNORE_OFFLINE

After this command restart the Certificate service again and the service should run without any issues.

8 comments:

Pertzog said...

Great Solution ! worked perfect for me !

thanks !

Anonymous said...

Perfect!!!!Perfect!!! Perfect!!!!!
Thank you very much.....i was troubleshooting it about 03 hours

Anonymous said...

Khurram it was very nice and it helped me in big way thanks.

one question will this workaround cause any problem later on with root ???

Razi

Khurram Ullah Khan said...

@Riz

No i havent faced any problem after this fix.

Khurram.

Marshal said...

Great Solution! Surprise this is not on MS KB yet...Thanks Khurrambhai.

Marshal

Anonymous said...

thanks :)

Anonymous said...

Thanks helped me out studying for my 70-640 exam.

Chennai MCSE said...

Great solution. But this is disabling the CRL lookup. How to provide the path to CRL?? Any idea?