Error Message: The Certification Authority Service Has Not Been Started (300867)


The information in this article applies to:

  • Microsoft Windows 2000 Server SP1
  • Microsoft Windows 2000 Server SP2
  • Microsoft Windows 2000 Advanced Server SP1
  • Microsoft Windows 2000 Advanced Server SP2
  • Microsoft Windows 2000 Professional SP1
  • Microsoft Windows 2000 Professional SP2
  • Microsoft Windows 2000 Datacenter Server SP2
  • Microsoft Windows XP Home Edition
  • Microsoft Windows XP Professional
This article was previously published under Q300867

SYMPTOMS

When you request a certificate from a Web page through a Web proxy, you may receive the following error messages:
  • Your request failed. An error occurred while the server was processing your request.

    Contact your administrator for further assistance.
    Access is denied. 0x80070005 (WIN32: 5)
    COM Error Info:
    CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
    LastStatus:
    The operation completed successfully. 0x0 (0)
    Suggested Cause:
    The Certification Authority Service has not been started.

CAUSE

This problem can occur if the computer account for the server on which the Web Proxy service is hosted has not been authorized for delegation.

RESOLUTION

To resolve this problem, on a domain controller (DC) or workstation with the Active Directory administrative tools installed, enable the Web proxy's computer account for delegation:
  1. Log on as a domain administrator or equivalent account.
  2. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
  3. In the left pane, locate the container or organizational unit (OU) on which you want to enable delegation.
  4. Right-click the computer account name, and then click Properties.
  5. On the General tab, click Trust computer for delegation.
  6. Click OK.
  7. Quit Active Directory Users and Computers.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

For additional information about Kerberos and delegation, click the article number below to view the article in the Microsoft Knowledge Base:

283201 HOW TO: Use Delegation in Windows 2000 with COM+

266080 Answers to Frequently Asked Kerberos Questions

Modification Type:MajorLast Reviewed:9/24/2003
Keywords:kberrmsg kbprb kbtool KB300867
©2003 Microsoft Corporation. All rights reserved.