| | DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
|---|
 | Collection Rule for event with source CertificationAuthority and ID 10 | Certificate Services cannot verify revocation status. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.10 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 10 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 100 | Certificate Services did not start: CA certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.100 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 100 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 101 | Active Directory Certificate Services created CA cross certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.101 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 101 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 102 | Certificate Services could not create a cross certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.102 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 102 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 103 | A root CA certificate was added to the local enterprise root store. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.103 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 103 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 104 | Active Directory Certificate Services published certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.104 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 104 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 105 | Active Directory Certificate Services deleted invalid certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.105 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 105 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 106 | Certificate Services cannot add a CA certificate to Active Directory | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.106 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 106 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 107 | Certificate Services cannot delete a CA certificate from Active Directory. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.107 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 107 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 108 | Active Directory Certificate Services could not delete a Certificate for request from specified location. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.108 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 108 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 109 | Active Directory Certificate Services could not delete a Certificate for request from the specified location and server. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.109 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 109 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 110 | Certificate Services could not initialize performance counters. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.110 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 110 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 127 | Key recovery agent certificate is about to expire. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.127 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 127 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 128 | Certificate Services may not be configured to enable revocation checking for all issued certificates | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.128 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 128 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 129 | An invalid OID has been detected in the EnabledEKUForDefinedCACert configuration setting. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.129 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 129 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 130 | Certificate Services could not create a certificate revocation list (CRL). | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.130 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 130 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 131 | An invalid OID has been detected in the EKUOIDsForPublishExpiredCertInCRL configuration setting. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.131 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 131 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 132 | Certificate Services failed to decrypt | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.132 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 132 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 16 | Certificate Services did not start: OLE. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.16 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 16 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 17 | Certificate Services did not start: database connection. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.17 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 17 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 19 | Certificate Services did not start: registry problem. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.19 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 19 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 20 | Certificate Services did not start: registry problem. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.20 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 20 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 21 | Certificate Services failed to process a request. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.21 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 21 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 22 | Certificate Services failed to process a request. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.22 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 22 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 23 | A certificate request could not be processed because of bad certificate input data. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.23 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 23 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 25 | Active Directory Certificate Services revoked the certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.25 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 25 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 26 | Certificate Services service started | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.26 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 26 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 27 | CA installation incomplete. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.27 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 27 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 28 | Certificate Services did not start: registry problem. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.28 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 28 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 29 | Active Directory Certificate Services issued a new Certificate Revocation List. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.29 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 29 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 3 | Certificate Services failed to process a request. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.3 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 3 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 33 | Certificate Services did not start: service thread. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.33 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 33 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 34 | Certificate Services did not start: RPC | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.34 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 34 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 35 | Certificate Services did not start: OLE. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.35 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 35 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 38 | Certificate Services service was stopped | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.38 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 38 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 39 | Certificate Services did not start: DCOM registration | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.39 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 39 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 40 | Certificate Services did not start: class factories failed to start. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.40 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 40 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 42 | Certificate Services did not start: CA certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.42 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 42 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 43 | The policy module encountered an error. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.43 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 43 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 44 | The policy module encountered an error. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.44 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 44 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 45 | An exit module has returned a severe error. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.45 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 45 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 46 | An exit module has returned a severe error. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.46 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 46 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 48 | Revocation cannot be checked | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.48 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 48 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 49 | Revocation cannot be checked | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.49 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 49 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 5 | Certificate Services could not find essential registry information. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.5 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 5 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 51 | A certificate in the chain for the CA certificate has been revoked. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.51 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 51 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 52 | Active Directory Certificate Services issued a certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.52 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 52 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 53 | A certificate request has been denied. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.53 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 53 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 54 | Active Directory Certificate Services left request pending in the queue. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.54 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 54 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 55 | Active Directory Certificate Services unrevoked the certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.55 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 55 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 56 | A certificate request has been denied. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.56 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 56 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 57 | A certificate request has been denied. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.57 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 57 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 58 (Error) | A certificate in the chain for the CA certificate has expired. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.58_Error | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 0 | | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 58 (Info) | A certificate in the chain for the CA certificate has expired. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.58_Info | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 59 | Certificate Services could not connect to Active Directory. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.59 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 59 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 6 | Active Directory Certificate Services issued a certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.6 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 6 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 60 | Certificate Services refused to process an extremely long certificate request. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.60 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 60 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 62 | Certificate Services has reverted to default certificate revocation list (CRL) publication values. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.62 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 62 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 63 | Certificate Services did not start. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.63 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 63 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 64 | Certificate Services cannot publish enrollment access changes to Active Directory. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.64 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 64 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 65 | Certificate Services could not publish a certificate revocation list (CRL). | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.65 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 65 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 66 | Certificate Services could not publish a certificate revocation list (CRL). | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.66 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 66 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 67 | Certificate Services will not publish a certificate revocation list (CRL) until the next CRL is issued. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.67 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 67 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 68 | Active Directory Certificate Services successfully published Base CRL(s). | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.68 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 68 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 69 | Active Directory Certificate Services successfully published Delta CRL(s). | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.69 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 69 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 7 | A certificate request has been denied. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.7 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 7 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 71 | Active Directory Certificate Services successfully published Base CRL(s) to server. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.71 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 71 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 72 | Active Directory Certificate Services successfully published Delta CRL(s) to server. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.72 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 72 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 73 | Active Directory Certificate Services successfully published Base and Delta CRL(s) to server. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.73 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 73 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 74 | Certificate Services could not publish a certificate revocation list (CRL). | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.74 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 74 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 75 | Certificate Services could not publish a certificate revocation list (CRL). | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.75 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 75 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 76 | The Policy Module logged information. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.76 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 76 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 77 | The policy module encountered a warning. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.77 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 77 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 78 | The policy module encountered an error. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.78 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 78 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 79 | Certificate Services failed to publish an end-entity certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.79 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 79 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 8 | Active Directory Certificate Services left request pending in the queue. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.8 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 8 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 80 | Certificate Services failed to publish an end-entity certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.80 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 80 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 81 | Certificate Services key archival is not supported on this version of Windows Server. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.81 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 81 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 82 | Certificate Services encountered an error loading key recovery agent certificates. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.82 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 82 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 83 | Certificate Services encountered an error loading key recovery agent certificates. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.83 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 83 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 84 | Certificate Services could not use a key recovery agent certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.84 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 84 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 85 | Certificate Services could not use a key recovery agent certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.85 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 85 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 86 | Certificate Services could not use the specified provider for encryption keys. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.86 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 86 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 87 | Certificate Services could not use the specified provider for encryption keys. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.87 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 87 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 88 | Certificate Services switched to the default provider for encryption keys. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.88 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 88 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 9 | Certificate Services did not start: external policy module. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.9 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 9 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 90 | Certificate Services detected an exception. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.90 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 90 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 91 | Certificate Services could not connect to Active Directory. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.91 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 91 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 92 | Certificate Services could not update security permissions. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.92 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 92 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 93 | Certificate Services cannot find the CA certificate in the NTAuth store. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.93 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 93 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 94 | Certificate Services cannot open the NTAuth store. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.94 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 94 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 95 | Certificate Services could not start: security permissions have been corrupted. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.95 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 95 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 96 | Certificate Services could not create an encryption certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.96 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 96 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 98 | Certificate Services encountered an error loading key recovery agent certificates. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.98 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 98 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 99 | Certificate Services could not create a cross certificate. | Microsoft.Windows.CertificateServices.CARole.2016.CertSvcEvents.99 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 99 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source OnlineResponder and ID 17 | Online Responder service started | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.17 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 17 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 18 | The Online Responder service was stopped | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.18 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 18 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 20 | The Online Responder service failed to start. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.20 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 20 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 22 | The Online Responder service did not process a very long request. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.22 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 22 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 23 | An Online Responder service signing certificate cannot be found. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.23 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 23 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 25 | The Online Responder service signing certificate is about to expire. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.25 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 25 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 26 | The Online Responder service certificate has expired. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.26 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 26 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 27 | The Online Responder failed to renew a signing certificate | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.27 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 27 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 29 | Online Responder service configuration problem. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.29 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 29 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 31 | Online Responder service performance counters failed to initialize. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.31 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 31 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 33 | The Online Responder service encountered an error generating an enrollment request for a signing certificate. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.33 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 33 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 34 | The Online Responder service encountered an error submitting an enrollment request for a signing certificate. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.34 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 34 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponder and ID 35 | The Online Responder service encountered an error while installing a signing certificate. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.35 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 35 | Microsoft-Windows-OnlineResponder | False | | | True | Application |
| Collection Rule for event with source OnlineResponderRevocationProvider and ID 16 | The Online Responder service could not access a certificate revocation list. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.RevocationProvider.16 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 16 | Microsoft-Windows-OnlineResponderRevocationProvider | False | | | True | Application |
| Collection Rule for event with source OnlineResponderRevocationProvider and ID 17 | The Online Responder service could not access a certificate revocation list. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.RevocationProvider.17 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 17 | Microsoft-Windows-OnlineResponderRevocationProvider | False | | | True | Application |
| Collection Rule for event with source OnlineResponderRevocationProvider and ID 18 | The Online Responder service is attempting to use an invalid delta CRL. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.RevocationProvider.18 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 18 | Microsoft-Windows-OnlineResponderRevocationProvider | False | | | True | Application |
| Collection Rule for event with source OnlineResponderWebProxy and ID 17 | Online Responder web proxy failed to start | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.WebProxy.17 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 17 | Microsoft-Windows-OnlineResponderWebProxy | False | | | True | Application |
| Collection Rule for event with source OnlineResponderWebProxy and ID 18 | Online Responder web proxy started | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.WebProxy.18 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 18 | Microsoft-Windows-OnlineResponderWebProxy | False | | | True | Application |
| Collection Rule for event with source OnlineResponderWebProxy and ID 19 | The Online Responder web proxy was stopped. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.WebProxy.19 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 19 | Microsoft-Windows-OnlineResponderWebProxy | False | | | True | Application |
| Collection Rule for event with source OnlineResponderWebProxy and ID 20 | The Online Responder web proxy corrected an invalid configuration. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.WebProxy.20 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 20 | Microsoft-Windows-OnlineResponderWebProxy | False | | | True | Application |
| Collection Rule for event with source OnlineResponderWebProxy and ID 21 | The Online Responder web proxy did not process a very long request. | Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.WebProxy.21 | Microsoft.Windows.CertificateServices.CARole.2016 | EventCollection | True | | | 0 | 21 | Microsoft-Windows-OnlineResponderWebProxy | False | | | True | Application |
Home