Click here to get back home

0x424 (WIN32: 1060) in Enterprise Root CA

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
0x424 (WIN32: 1060) in Enterprise Root CA Sergio Minniti 06-06-2005
Posted by Sergio Minniti on June 6, 2005, 9:03 am
Please log in for more thread options
Hi! From some month when I try to open Certification Authority mmc I received
the following error: "The specified service does not exist as an installed
service.
0x424(WIN32:1060)". I have checked in Add/Remove Programm and all flags are
enable for Certificate Authority option bu the enterprise Root CA does'n
work. May you help me? I have searched in Internet but no answer I have
found.


Posted by Steven L Umbach on June 6, 2005, 3:21 pm
Please log in for more thread options
When you look at services using services.msc it should show the service
"certificate services" and be started with automatic startup type. Look in
Event Viewer for any pertinent errors/warnings that may help resolve the
problem. I have never had the problem you experience but a possible solution
may be to uninstall Certificate Services and then reinstall it if with the
same CA key if you can backup the CA certificate/private key and
certificates database. Since you can not use the mmc snapin for CA you still
may be able to do such with the certutil command line tool as shown in the
link below. The certificate services service will need to be started in
order to backup the certificate database of the certificates the CA has
issued.

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/2272f3c8-1103-402b-a945-3dc0a1b489fb.mspx



> Hi! From some month when I try to open Certification Authority mmc I
> received
> the following error: "The specified service does not exist as an installed
> service.
> 0x424(WIN32:1060)". I have checked in Add/Remove Programm and all flags
> are
> enable for Certificate Authority option bu the enterprise Root CA does'n
> work. May you help me? I have searched in Internet but no answer I have
> found.




Posted by Sergio Minniti on June 6, 2005, 3:05 pm
Please log in for more thread options
Hi Steven. I have checked it. The service "Certificate Services" isn't
present in services.msc.. but in Add/Remove Programm all flags are enable for
Certificate Authority option and the IIS CA enrollment site is browsable but
don't work too. Nothing in Event Viewer. What can I do??
Thanks a lot for your support!!

"Steven L Umbach" wrote:

> When you look at services using services.msc it should show the service
> "certificate services" and be started with automatic startup type. Look in
> Event Viewer for any pertinent errors/warnings that may help resolve the
> problem. I have never had the problem you experience but a possible solution
> may be to uninstall Certificate Services and then reinstall it if with the
> same CA key if you can backup the CA certificate/private key and
> certificates database. Since you can not use the mmc snapin for CA you still
> may be able to do such with the certutil command line tool as shown in the
> link below. The certificate services service will need to be started in
> order to backup the certificate database of the certificates the CA has
> issued.
>
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/2272f3c8-1103-402b-a945-3dc0a1b489fb.mspx
>
>
>
> > Hi! From some month when I try to open Certification Authority mmc I
> > received
> > the following error: "The specified service does not exist as an installed
> > service.
> > 0x424(WIN32:1060)". I have checked in Add/Remove Programm and all flags
> > are
> > enable for Certificate Authority option bu the enterprise Root CA does'n
> > work. May you help me? I have searched in Internet but no answer I have
> > found.
>
>
>


Posted by Steven L Umbach on June 7, 2005, 11:48 am
Please log in for more thread options
If the service Certificate Services is not even present on the Certificate
Authority then something major wrong is going on. If you have a System State
backup of the Certificate Authority from a time before the problems began
you could try restoring that. Another thing you could try is to run System
File Checker as in sfc /scannow in case some critical system files are
missing. Beyond that you could try to uninstall [add and remove programs -
Windows components] and reinstall your Certificate Authority with the same
certificate/private key as you are using now being sure to backup your
current certificate/private key for the CA.

Whatever you try be sure to make a full backup of the current CA such as a
Ghost image type file in case your repair operations delete something you
need so that you can at least start over from where you are now. I would
also post in the Microsoft.public.security.crypto newsgroup. The links below
may help. --- Steve

http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/windows/2000/server/reskit/en-us/distrib/dscj_mcs_kobd.asp
OR
http://tinyurl.com/bq3ee
http://support.microsoft.com/?id=298138

> Hi Steven. I have checked it. The service "Certificate Services" isn't
> present in services.msc.. but in Add/Remove Programm all flags are enable
> for
> Certificate Authority option and the IIS CA enrollment site is browsable
> but
> don't work too. Nothing in Event Viewer. What can I do??
> Thanks a lot for your support!!
>
> "Steven L Umbach" wrote:
>
>> When you look at services using services.msc it should show the service
>> "certificate services" and be started with automatic startup type. Look
>> in
>> Event Viewer for any pertinent errors/warnings that may help resolve the
>> problem. I have never had the problem you experience but a possible
>> solution
>> may be to uninstall Certificate Services and then reinstall it if with
>> the
>> same CA key if you can backup the CA certificate/private key and
>> certificates database. Since you can not use the mmc snapin for CA you
>> still
>> may be able to do such with the certutil command line tool as shown in
>> the
>> link below. The certificate services service will need to be started in
>> order to backup the certificate database of the certificates the CA has
>> issued.
>>
>>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/2272f3c8-1103-402b-a945-3dc0a1b489fb.mspx
>>
>>
>>
>> message
>> > Hi! From some month when I try to open Certification Authority mmc I
>> > received
>> > the following error: "The specified service does not exist as an
>> > installed
>> > service.
>> > 0x424(WIN32:1060)". I have checked in Add/Remove Programm and all flags
>> > are
>> > enable for Certificate Authority option bu the enterprise Root CA
>> > does'n
>> > work. May you help me? I have searched in Internet but no answer I
>> > have
>> > found.
>>
>>
>>




Posted by slap0r on August 22, 2007, 5:38 am
Please log in for more thread options

Hi everyone and especially Sergio Minniti,

I'm really interested in your solution for this topic, since it was
never posted here. Because I'm now faced with the same for one of our
customers and it's not even possible to reinstall the certificate
authority via add/remove software. So i get the same error when opening
the mmc for certificates and when i want to reinstall I'm getting an
error like:


Code:
--------------------
Beim Erstellen des Schlüsselcontainers "namemeinerzertifizierungsstelle" für
die Zertifikatdienste ist ein Fehler aufgetreten. Die Konfiguration des
Kryptografiedienstanbieters ist entweder nicht vollständig oder die
Schlüssellänge wird nicht unterstützt. Stellen Sie sicher, dass der
Kryptografiedienstanbieter richtig installiert wurde oder wählen Sie einen
anderen Kryptografiedienstanbieter.
Zugriff verweigert *0x80070005 (WIN32: 5)*
--------------------


Sorry for the German one. But i hope the Error-Code says it all.

If anyone got any Idea, i would be gratefull! Thanks in advance.

Greets
Andrew


--
slap0r
------------------------------------------------------------------------
slap0r's Profile: http://forums.techarena.in/member.php?userid=29773
View this thread: http://forums.techarena.in/showthread.php?t=188857

http://forums.techarena.in


Similar ThreadsPosted
Migrate Enterprise root authority CA to stand-alone root CA December 13, 2005, 7:57 am
Stans-alone root CA or Enterprise root CA August 31, 2006, 6:32 pm
More than one enterprise root CA in a forest? January 18, 2006, 4:13 am
move enterprise root ca September 13, 2006, 8:09 am
Installing Enterprise Root CA March 3, 2007, 10:00 am
Moving Enterprise Root CA March 22, 2007, 11:05 am
Re-Configuring LDAP CDP on Enterprise Root CA February 17, 2007, 1:31 am
EFS concerns before removing enterprise root CA March 23, 2007, 8:59 am
Enterprise Root Certification Authority not trusted February 16, 2006, 2:07 pm
enterprise January 30, 2006, 1:46 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap