Install-ADcsCertificationAuthority : Active Directory Certificate Services setup failed with the following error: No attempts to start the service have been made since the last boot
i attempted install offline root ca via following command:
install-adcscertificationauthority ` -overwriteexistingkey ` <#in case of re-installation#> ` -cacommonname ` "lab corporate root ca" ` -cadistinguishednamesuffix ` ‘o=lab inc.,c=us’ ` -catype ` standalonerootca ` -cryptoprovidername ` "rsa#microsoft software key storage provider" ` -hashalgorithmname ` sha256 ` -keylength ` 2048 ` -validityperiod ` years ` -validityperiodunits ` 20 ` -databasedirectory ` ‘e:\cadata\certdb’ ` -logdirectory ` ‘e:\cadata\certlog ’
when running command threw error:
install-adcscertificationauthority : active directory certificate services setup failed following error: no attempts start service have been made since last boot. 0x80070435 (win32: 1077) @ line:1 char:1 + install-adcscertificationauthority ` + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + categoryinfo : invalidoperation: (:) [install-adcscertification authority], certificationauthoritysetupexception + fullyqualifiederrorid : install,microsoft.certificateservices.deployment .commands.ca.installadcscertificationauthoritylooks did install though because when run command again tells me role installed , have uninstall first.
it worked when did following:
ran add-windowsfeature ad-certificate first (before ran install-windowsfeature ad-certificate)- confused if issue because add-windowsfeature supposed have been deprecated.
changed sha256 sha1 (this lab don't have security policies involving encryption algorithms have enforce)
Windows Server > Security
Comments
Post a Comment