| | DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
|---|
 | Collection Rule for event with source CertificationAuthority and ID 10 | Certificate Services cannot verify revocation status. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.10 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 10 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 100 | Certificate Services did not start: CA certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.100 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 100 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 101 | Active Directory Certificate Services created CA cross certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.101 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 101 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 102 | Certificate Services could not create a cross certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.102 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 102 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 103 | A root CA certificate was added to the local enterprise root store. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.103 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 103 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 104 | Active Directory Certificate Services published certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.104 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 104 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 105 | Active Directory Certificate Services deleted invalid certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.105 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 105 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 106 | Certificate Services cannot add a CA certificate to Active Directory | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.106 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 106 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 107 | Certificate Services cannot delete a CA certificate from Active Directory. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.107 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 107 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 108 | Active Directory Certificate Services could not delete a Certificate for request from specified location. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.108 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 108 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 109 | Active Directory Certificate Services could not delete a Certificate for request from the specified location and server. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.109 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 109 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 110 | Certificate Services could not initialize performance counters. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.110 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 110 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 127 | Key recovery agent certificate is about to expire. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.127 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 127 | Microsoft-Windows-CertificationAuthority | True | Warning | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 128 | Certificate Services may not be configured to enable revocation checking for all issued certificates | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.128 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 128 | Microsoft-Windows-CertificationAuthority | True | Warning | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 129 | An invalid OID has been detected in the EnabledEKUForDefinedCACert configuration setting. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.129 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 129 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 130 | Certificate Services could not create a certificate revocation list (CRL). | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.130 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 130 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 131 | An invalid OID has been detected in the EKUOIDsForPublishExpiredCertInCRL configuration setting. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.131 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 131 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 132 | Certificate Services failed to decrypt | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.132 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 132 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 133 | AD CS failed to create a certificate or CRL containing Unicode characters | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.133 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 133 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 16 | Certificate Services did not start: OLE. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.16 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 16 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 17 | Certificate Services did not start: database connection. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.17 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 17 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 19 | Certificate Services did not start: registry problem. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.19 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 19 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 20 | Certificate Services did not start: registry problem. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.20 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 20 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 21 | Certificate Services failed to process a request. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.21 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 21 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 22 | Certificate Services failed to process a request. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.22 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 22 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 25 | Active Directory Certificate Services revoked the certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.25 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 25 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 26 | Certificate Services service started | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.26 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 26 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 27 | CA installation incomplete. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.27 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 27 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 28 | Certificate Services did not start: registry problem. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.28 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 28 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 29 | Active Directory Certificate Services issued a new Certificate Revocation List. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.29 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 29 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 33 | Certificate Services did not start: service thread. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.33 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 33 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 34 | Certificate Services did not start: RPC | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.34 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 34 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 35 | Certificate Services did not start: OLE. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.35 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 35 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 38 | Certificate Services service was stopped | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.38 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 38 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 39 | Certificate Services did not start: DCOM registration | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.39 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 39 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 40 | Certificate Services did not start: class factories failed to start. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.40 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 40 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 42 | Certificate Services did not start: CA certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.42 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 42 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 43 | The policy module encountered an error. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.43 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 43 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 44 | The policy module encountered an error. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.44 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 44 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 45 | An exit module has returned an exception. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.45 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 45 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 46 | An exit module has returned a severe error. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.46 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 46 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 48 | Revocation cannot be checked | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.48 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 48 | Microsoft-Windows-CertificationAuthority | True | Warning | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 49 | Revocation cannot be checked | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.49 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 49 | Microsoft-Windows-CertificationAuthority | True | Warning | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 5 | Certificate Services could not find essential registry information. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.5 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 5 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 51 | A certificate in the chain for the CA certificate has been revoked. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.51 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 51 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 52 | Active Directory Certificate Services issued a certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.52 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 52 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 53 | A certificate request has been denied. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.53 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 53 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 54 | Active Directory Certificate Services left request pending in the queue. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.54 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 54 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 55 | Active Directory Certificate Services unrevoked the certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.55 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 55 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 56 | A certificate request has been denied. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.56 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 56 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 57 | A certificate request has been denied. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.57 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 57 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 58 | A certificate in the chain for the CA certificate has expired. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.58_Error | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 0 | | True | Error | High | True | Application |
| Collection Rule for error event with source CertificationAuthority and ID 58 | A certificate in the chain for the CA certificate has expired. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.58_Info | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Collection Rule for informational event with source CertificationAuthority and ID 59 | Certificate Services could not connect to Active Directory. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.59 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 59 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 6 | Active Directory Certificate Services issued a certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.6 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 6 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 60 | Certificate Services refused to process an extremely long certificate request. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.60 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 60 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 62 | Certificate Services has reverted to default certificate revocation list (CRL) publication values. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.62 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 62 | Microsoft-Windows-CertificationAuthority | True | Warning | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 63 | Certificate Services did not start. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.63 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 63 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 64 | Certificate Services cannot publish enrollment access changes to Active Directory. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.64 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 64 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 65 | Certificate Services could not publish a certificate revocation list (CRL). | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.65 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 65 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 66 | Certificate Services could not publish a certificate revocation list (CRL). | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.66 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 66 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 67 | Certificate Services will not publish a certificate revocation list (CRL) until the next CRL is issued. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.67 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 67 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 68 | Active Directory Certificate Services successfully published Base CRL(s). | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.68 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 68 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 69 | Active Directory Certificate Services successfully published Delta CRL(s). | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.69 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 69 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 7 | A certificate request has been denied. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.7 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 7 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 70 | Active Directory Certificate Services successfully published Base and Delta CRL(s) to server. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.70 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 70 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 71 | Active Directory Certificate Services successfully published Base CRL(s) to server. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.71 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 71 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 72 | Active Directory Certificate Services successfully published Delta CRL(s) to server. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.72 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 72 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 73 | Active Directory Certificate Services successfully published Base and Delta CRL(s) to server. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.73 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 73 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 74 | Certificate Services could not publish a certificate revocation list (CRL). | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.74 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 74 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 75 | Certificate Services could not publish a certificate revocation list (CRL). | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.75 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 75 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 76 | The Policy Module logged information. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.76 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 76 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 77 | The policy module encountered a warning. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.77 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 77 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 78 | The policy module encountered an error. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.78 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 78 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 79 | Certificate Services failed to publish an end-entity certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.79 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 79 | Microsoft-Windows-CertificationAuthority | True | Warning | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 8 | Active Directory Certificate Services left request pending in the queue. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.8 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 8 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 80 | Certificate Services failed to publish an end-entity certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.80 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 80 | Microsoft-Windows-CertificationAuthority | True | Warning | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 81 | Certificate Services key archival is not supported on this version of Windows Server. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.81 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 81 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 82 | Certificate Services encountered an error loading key recovery agent certificates. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.82 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 82 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 83 | Certificate Services encountered an error loading key recovery agent certificates. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.83 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 83 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 84 | Certificate Services could not use a key recovery agent certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.84 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 84 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 85 | Certificate Services could not use a key recovery agent certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.85 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 85 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 86 | Certificate Services could not use the specified provider for encryption keys. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.86 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 86 | Microsoft-Windows-CertificationAuthority | True | Warning | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 87 | Certificate Services could not use the specified provider for encryption keys. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.87 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 87 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 88 | Certificate Services switched to the default provider for encryption keys. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.88 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 88 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 9 | Certificate Services did not start: external policy module. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.9 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 9 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 90 | Certificate Services detected an exception. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.90 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 90 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 91 | Certificate Services could not connect to Active Directory. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.91 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 91 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 92 | Certificate Services could not update security permissions. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.92 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 92 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 93 | Certificate Services cannot find the CA certificate in the NTAuth store. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.93 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 93 | Microsoft-Windows-CertificationAuthority | True | Warning | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 94 | Certificate Services cannot open the NTAuth store. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.94 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 94 | Microsoft-Windows-CertificationAuthority | True | Warning | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 95 | Certificate Services could not start: security permissions have been corrupted. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.95 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 95 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 96 | Certificate Services could not create an encryption certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.96 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 96 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 97 | Certificate Services reduced the maximum lifetime of the issued certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.97 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 97 | Microsoft-Windows-CertificationAuthority | False | | | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 98 | Certificate Services encountered an error loading key recovery agent certificates. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.98 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 98 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
| Collection Rule for event with source CertificationAuthority and ID 99 | Certificate Services could not create a cross certificate. | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.99 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | | | 0 | 99 | Microsoft-Windows-CertificationAuthority | True | Error | High | True | Application |
Home