Successful Errors Installing Windows Server 2008 Certificate Authority

re: Successful Errors Installing Windows Server 2008 Certificate Authority

greener85 — Tue, 09 Jun 2009 02:30:13 GMT

Hey Thomas,

So we have seen this error before.

I have a feeling that you probably either do not have the OID container object in your configuration partition or you do the have to OID container there but it is of the wrong objectClass type.

Look at the following location using ADSIEdit.msc

Public Key Services,Services,Configuration,dc=<AD Root Domain Name>

The following containers should exist:

AIA = ObjectClass of "top;container"

CDP = ObjectClass of "top;container"

Certificate Templates = ObjectClass of "top;container"

Certification Authorities = ObjectClass of "top;container"

Enrollment Services (May be not there until the CA is installed) = ObjectClass of "top;container"

KRA = ObjectClass of "top;container"

OID = ObjectClass of "top;msPKI-Enterprise-Oid"

If the OID container is set to "top;Container" then you will need to delete it, then recreate it using the following steps:

1. In ADSIEDIT.MSC, click on the CN=Public Key Services container.

2. In the right hand pane, locate CN=OID.

3. Now create a new object in the CN=Public Key Services container.

4. Select the class: msPKI-Enterprise-OID. Click Next.

5. Set the cn attribute to OID, and click Next.

6. You don’t need to set any more attributes, so click Finish.

I hope that this helps,

Rob Greene

re: Successful Errors Installing Windows Server 2008 Certificate Authority

thillerbrand — Mon, 08 Jun 2009 14:53:08 GMT

Great post, I have nearly the same incident, but the permissions are ok. I get a "file not found" when I try to install the CA (unfortunately a germn error message):

ervices,CN=Services,CN=Configuration,DC=avat,DC=local

202.2428.246: Sperrlisten-Verteilungspunktobjekt für Verzeichnisdienst erstellen202.3726.249: Zertifizierungsstelle im Verzeichnisdienst veröffentlichen

109.1880.439: Zertifikat erstellen

109.2552.443: Server installieren: Das System kann die angegebene Datei nicht finden

(***this is file not found***)

. 0x80070002 (WIN32: 2)

0.0.965: Meldungsfeld: EmergencyMessageBox: Fatal: 0x80004003 MsgId: 0x : Das System kann die angegebene Datei nicht finden. 0x80070002 (WIN32: 2)

114.5848.949: Ende: CCertSrvSetup::Install: Das System kann die angegebene Datei nicht finden. 0x80070002 (WIN32: 2)

I have tried all the stuff I found, but nothing works...

Thomas

re: Successful Errors Installing Windows Server 2008 Certificate Authority

NedPyle [MSFT] — Thu, 05 Mar 2009 21:56:53 GMT

It's a good complaint, I agree. :) I'll poke some dev's about that as a Win8 request, thanks.

- Ned

re: Successful Errors Installing Windows Server 2008 Certificate Authority

cnschindler — Thu, 05 Mar 2009 21:50:20 GMT

Nice Post! I hate to complain...but it would be nice if those logs could all be found in the same location. What about "%Systemroot%\Logs"? :-) Christian Schindler