Install-ADcsCertificationAuthority : Active Directory Certificate Services setup failed with the following error: No attempts to start the service have been made since the last boot

i attempted install offline root ca via following command:

install-adcscertificationauthority `  -overwriteexistingkey `  <#in case of re-installation#> `  -cacommonname `  "lab corporate root ca" `  -cadistinguishednamesuffix `  ‘o=lab inc.,c=us’ `  -catype `  standalonerootca `  -cryptoprovidername `  "rsa#microsoft software key storage provider" `  -hashalgorithmname `  sha256 `  -keylength `  2048 `  -validityperiod `  years `  -validityperiodunits `  20 `  -databasedirectory `  ‘e:\cadata\certdb’ `  -logdirectory `  ‘e:\cadata\certlog ’

when running command threw error:

install-adcscertificationauthority : active directory certificate services  setup failed following error:  no attempts start service have  been made since last boot. 0x80070435 (win32: 1077)  @ line:1 char:1  + install-adcscertificationauthority `  + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~      + categoryinfo          : invalidoperation: (:) [install-adcscertification     authority], certificationauthoritysetupexception      + fullyqualifiederrorid : install,microsoft.certificateservices.deployment     .commands.ca.installadcscertificationauthority

looks did install though because when run command again tells me role installed , have uninstall first.

it worked when did following:

ran add-windowsfeature ad-certificate first (before ran install-windowsfeature ad-certificate)- confused if issue because add-windowsfeature supposed have been deprecated.

changed sha256 sha1 (this lab don't have security policies involving encryption algorithms have enforce)

Windows Server  >  Security