All Rules in Microsoft.Windows.ActiveDirectoryCertificateServices.2012.R2.Monitoring Management Pack

	DisplayName	Description	ID	Target	Category	Enabled	Instance Name	Counter Name	Frequency	Event_ID	Event Source	Alert Generate	Alert Severity	Alert Priority	Remotable	Event Log
	Collection Rule for event with source CertificationAuthority and ID 10	Certificate Services cannot verify revocation status.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.10	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	10	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 100	Certificate Services did not start: CA certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.100	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	100	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 101	Active Directory Certificate Services created CA cross certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.101	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	101	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 102	Certificate Services could not create a cross certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.102	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	102	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 103	A root CA certificate was added to the local enterprise root store.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.103	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	103	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 104	Active Directory Certificate Services published certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.104	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	104	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 105	Active Directory Certificate Services deleted invalid certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.105	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	105	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 106	Certificate Services cannot add a CA certificate to Active Directory	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.106	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	106	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 107	Certificate Services cannot delete a CA certificate from Active Directory.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.107	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	107	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 108	Active Directory Certificate Services could not delete a Certificate for request from specified location.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.108	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	108	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 109	Active Directory Certificate Services could not delete a Certificate for request from the specified location and server.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.109	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	109	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 110	Certificate Services could not initialize performance counters.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.110	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	110	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 127	Key recovery agent certificate is about to expire.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.127	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	127	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 128	Certificate Services may not be configured to enable revocation checking for all issued certificates	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.128	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	128	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 129	An invalid OID has been detected in the EnabledEKUForDefinedCACert configuration setting.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.129	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	129	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 130	Certificate Services could not create a certificate revocation list (CRL).	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.130	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	130	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 131	An invalid OID has been detected in the EKUOIDsForPublishExpiredCertInCRL configuration setting.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.131	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	131	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 132	Certificate Services failed to decrypt	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.132	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	132	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 16	Certificate Services did not start: OLE.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.16	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	16	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 17	Certificate Services did not start: database connection.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.17	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	17	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 19	Certificate Services did not start: registry problem.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.19	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	19	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 20	Certificate Services did not start: registry problem.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.20	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	20	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 21	Certificate Services failed to process a request.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.21	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	21	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 22	Certificate Services failed to process a request.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.22	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	22	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 23	A certificate request could not be processed because of bad certificate input data.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.23	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	23	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 25	Active Directory Certificate Services revoked the certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.25	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	25	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 26	Certificate Services service started	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.26	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	26	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 27	CA installation incomplete.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.27	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	27	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 28	Certificate Services did not start: registry problem.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.28	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	28	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 29	Active Directory Certificate Services issued a new Certificate Revocation List.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.29	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	29	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 3	Certificate Services failed to process a request.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.3	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	3	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 33	Certificate Services did not start: service thread.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.33	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	33	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 34	Certificate Services did not start: RPC	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.34	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	34	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 35	Certificate Services did not start: OLE.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.35	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	35	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 38	Certificate Services service was stopped	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.38	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	38	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 39	Certificate Services did not start: DCOM registration	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.39	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	39	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 40	Certificate Services did not start: class factories failed to start.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.40	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	40	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 42	Certificate Services did not start: CA certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.42	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	42	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 43	The policy module encountered an error.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.43	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	43	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 44	The policy module encountered an error.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.44	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	44	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 45	An exit module has returned a severe error.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.45	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	45	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 46	An exit module has returned a severe error.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.46	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	46	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 48	Revocation cannot be checked	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.48	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	48	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 49	Revocation cannot be checked	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.49	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	49	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 5	Certificate Services could not find essential registry information.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.5	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	5	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 51	A certificate in the chain for the CA certificate has been revoked.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.51	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	51	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 52	Active Directory Certificate Services issued a certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.52	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	52	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 53	A certificate request has been denied.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.53	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	53	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 54	Active Directory Certificate Services left request pending in the queue.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.54	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	54	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 55	Active Directory Certificate Services unrevoked the certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.55	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	55	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 56	A certificate request has been denied.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.56	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	56	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 57	A certificate request has been denied.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.57	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	57	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 58	A certificate in the chain for the CA certificate has expired.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.58_Error	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	0		True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 58	A certificate in the chain for the CA certificate has expired.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.58_Info	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	0		False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 59	Certificate Services could not connect to Active Directory.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.59	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	59	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 6	Active Directory Certificate Services issued a certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.6	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	6	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 60	Certificate Services refused to process an extremely long certificate request.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.60	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	60	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 62	Certificate Services has reverted to default certificate revocation list (CRL) publication values.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.62	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	62	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 63	Certificate Services did not start.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.63	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	63	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 64	Certificate Services cannot publish enrollment access changes to Active Directory.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.64	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	64	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 65	Certificate Services could not publish a certificate revocation list (CRL).	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.65	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	65	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 66	Certificate Services could not publish a certificate revocation list (CRL).	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.66	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	66	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 67	Certificate Services will not publish a certificate revocation list (CRL) until the next CRL is issued.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.67	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	67	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 68	Active Directory Certificate Services successfully published Base CRL(s).	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.68	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	68	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 69	Active Directory Certificate Services successfully published Delta CRL(s).	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.69	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	69	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 7	A certificate request has been denied.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.7	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	7	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 71	Active Directory Certificate Services successfully published Base CRL(s) to server.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.71	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	71	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 72	Active Directory Certificate Services successfully published Delta CRL(s) to server.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.72	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	72	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 73	Active Directory Certificate Services successfully published Base and Delta CRL(s) to server.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.73	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	73	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 74	Certificate Services could not publish a certificate revocation list (CRL).	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.74	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	74	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 75	Certificate Services could not publish a certificate revocation list (CRL).	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.75	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	75	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 76	The Policy Module logged information.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.76	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	76	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 77	The policy module encountered a warning.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.77	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	77	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 78	The policy module encountered an error.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.78	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	78	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 79	Certificate Services failed to publish an end-entity certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.79	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	79	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 8	Active Directory Certificate Services left request pending in the queue.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.8	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	8	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 80	Certificate Services failed to publish an end-entity certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.80	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	80	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 81	Certificate Services key archival is not supported on this version of Windows Server.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.81	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	81	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 82	Certificate Services encountered an error loading key recovery agent certificates.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.82	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	82	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 83	Certificate Services encountered an error loading key recovery agent certificates.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.83	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	83	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 84	Certificate Services could not use a key recovery agent certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.84	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	84	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 85	Certificate Services could not use a key recovery agent certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.85	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	85	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 86	Certificate Services could not use the specified provider for encryption keys.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.86	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	86	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 87	Certificate Services could not use the specified provider for encryption keys.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.87	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	87	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 88	Certificate Services switched to the default provider for encryption keys.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.88	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	88	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 9	Certificate Services did not start: external policy module.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.9	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	9	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 90	Certificate Services detected an exception.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.90	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	90	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 91	Certificate Services could not connect to Active Directory.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.91	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	91	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 92	Certificate Services could not update security permissions.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.92	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	92	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 93	Certificate Services cannot find the CA certificate in the NTAuth store.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.93	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	93	Microsoft-Windows-CertificationAuthority	False			True	Application
	Collection Rule for event with source CertificationAuthority and ID 94	Certificate Services cannot open the NTAuth store.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.94	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	94	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 95	Certificate Services could not start: security permissions have been corrupted.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.95	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	95	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 96	Certificate Services could not create an encryption certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.96	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	96	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 98	Certificate Services encountered an error loading key recovery agent certificates.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.98	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	98	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source CertificationAuthority and ID 99	Certificate Services could not create a cross certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.CertSvcEvents.99	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	99	Microsoft-Windows-CertificationAuthority	True	Error	High	True	Application
	Collection Rule for event with source OnlineResponder and ID 17	Online Responder service started	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.17	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	17	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 18	The Online Responder service was stopped	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.18	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	18	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 20	The Online Responder service failed to start.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.20	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	20	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 22	The Online Responder service did not process a very long request.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.22	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	22	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 23	An Online Responder service signing certificate cannot be found.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.23	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	23	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 25	The Online Responder service signing certificate is about to expire.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.25	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	25	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 26	The Online Responder service certificate has expired.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.26	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	26	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 27	The Online Responder failed to renew a signing certificate	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.27	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	27	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 29	Online Responder service configuration problem.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.29	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	29	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 31	Online Responder service performance counters failed to initialize.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.31	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	31	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 33	The Online Responder service encountered an error generating an enrollment request for a signing certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.33	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	33	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 34	The Online Responder service encountered an error submitting an enrollment request for a signing certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.34	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	34	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponder and ID 35	The Online Responder service encountered an error while installing a signing certificate.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.35	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	35	Microsoft-Windows-OnlineResponder	False			True	Application
	Collection Rule for event with source OnlineResponderRevocationProvider and ID 16	The Online Responder service could not access a certificate revocation list.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.RevocationProvider.16	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	16	Microsoft-Windows-OnlineResponderRevocationProvider	False			True	Application
	Collection Rule for event with source OnlineResponderRevocationProvider and ID 17	The Online Responder service could not access a certificate revocation list.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.RevocationProvider.17	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	17	Microsoft-Windows-OnlineResponderRevocationProvider	False			True	Application
	Collection Rule for event with source OnlineResponderRevocationProvider and ID 18	The Online Responder service is attempting to use an invalid delta CRL.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.RevocationProvider.18	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	18	Microsoft-Windows-OnlineResponderRevocationProvider	False			True	Application
	Collection Rule for event with source OnlineResponderWebProxy and ID 17	Online Responder web proxy failed to start	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.WebProxy.17	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	17	Microsoft-Windows-OnlineResponderWebProxy	False			True	Application
	Collection Rule for event with source OnlineResponderWebProxy and ID 18	Online Responder web proxy started	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.WebProxy.18	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	18	Microsoft-Windows-OnlineResponderWebProxy	False			True	Application
	Collection Rule for event with source OnlineResponderWebProxy and ID 19	The Online Responder web proxy was stopped.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.WebProxy.19	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	19	Microsoft-Windows-OnlineResponderWebProxy	False			True	Application
	Collection Rule for event with source OnlineResponderWebProxy and ID 20	The Online Responder web proxy corrected an invalid configuration.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.WebProxy.20	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	20	Microsoft-Windows-OnlineResponderWebProxy	False			True	Application
	Collection Rule for event with source OnlineResponderWebProxy and ID 21	The Online Responder web proxy did not process a very long request.	Microsoft.Windows.CertificateServices.CARole.6.3.OCSPEvents.WebProxy.21	Microsoft.Windows.CertificateServices.CARole.6.3	EventCollection	True			0	21	Microsoft-Windows-OnlineResponderWebProxy	False			True	Application