Solved

AD Certficate Services Service will not stay started

Posted on 2013-11-19
6
383 Views
Last Modified: 2013-12-04
Hi

We have an SBS 2008 server that has the following error when trying to start the Active Directory Certificate Services Service. It starts initially then immediately stops with the following error being logged:

Event ID 17, CertificationAuthority

Active Directory Certificate Services did not start; Unable to initialize the database connection for domain-server-CA. Unable to access the file. 0xc800040B (ESE: - 1032)

From the error code it looks as if the database file within system32\certlogs\ is either locked or doesn't have the correct permissions?

I have checked the permissions against a working SBS 2008 server and they are system, administrators and backup operator's with Full Control

It appears as if this has been a background problem for a while so I don't think I'd be able to restore the 1MB database file and am nervous about perhaps having to consider re-installing the role.

Look forward to your advice
0
Comment
Question by:Assist-Netopa
  • 3
  • 3
6 Comments
 
LVL 35

Expert Comment

by:Mahesh
ID: 39660436
You need to  reinitialize CA database
follow steps in below article
http://technet.microsoft.com/en-us/library/cc774578(v=ws.10).aspx
Thanks
0
 

Author Comment

by:Assist-Netopa
ID: 39668670
Mahesh

Thanks for the article however we have further problems:

If we run the integrity check esentutl /g it warns us the database is not up to date and we should run the recovery /r switch first.

When we run /r in the article is says use esentutl /r <databasename> however that is wrong the /r switch is looking for the base log file name which we guessed is edb?

When we run esentutl /r edb it says what is attached in the DOS window?


Some background info:

Initially we were missing the log files which I think had been moved accidentally during a tidy up for C drive space and perhaps the root cause of our issue. I moved them back in but there is a gap between the last modified date and log files of two months, see the logfiles.jpg

Any ideas what to try next? Typically we need this to re-issue the self-assigned certificate which has now expired

Thanks very much
esentutl--r-Error.JPG
Logfiles.jpg
0
 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39668704
You need to remove and reinstall the Certificate Authority role on SBS 2008 server. This is expressly supported by MS.
http://technet.microsoft.com/en-us/library/dd421659(v=ws.10).aspx

Mahesh
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:Assist-Netopa
ID: 39674761
Thanks

We will try that procedure and see if that cures it, was trying to avoid that but it looks like it's necessary.
0
 

Author Comment

by:Assist-Netopa
ID: 39695056
Mahesh

Re-installing the certificate authority worked, it had been preventing us renewing the self assigned certificate.

Thanks
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39695120
it had been preventing us renewing the self assigned certificate.


Sorry,
I am not getting..

Which certificate you are trying to renew please ?

Mahesh
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Many admins will agree: WSUS is is a nice invention but using it on the client side when updating a newly installed computer is still time consuming as you have to do several reboots and furthermore, the procedure of installing updates, rebooting an…
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now