question

MEYERJASON-0597 avatar image
0 Votes"
MEYERJASON-0597 asked DaisyZhou-MSFT edited

Windows 2016 Certificate Service will not start.

After a careless mistake of deleting the computer account for the CA, I get this error. Active Directory Certificate Services did not start: Could not load or verify the current CA certificate. servername The system cannot find the file specified. 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND).

I was able to restore the computer account using AD Admin Center and I can login via RDC and a domain admin user. But the above error still appears. I migrated from 2008 R2 about a year ago and still have that backup from the OLD CA. its not used for much really, just computer certificates in my domain.

windows-server-security
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @MEYERJASON-0597,
I just want to confirm the current situations.
Please feel free to let us know if you need further assistance.


Best Regards,
Daisy Zhou

0 Votes 0 ·

Hello @MEYERJASON-0597,
How are things going on your end? Please keep me posted on this issue.
If you have any further questions or concerns about this question, please let us know.
I appreciate your time and efforts.

Best Regards,
Daisy Zhou

0 Votes 0 ·

1 Answer

DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered

Hello @MEYERJASON-0597,

Thank you for posting here.

As I understand, you have one-tier enterprise CA in your AD domain.

Based on the description "still have that backup from the OLD CA.", do you mean you still have the old CA backup before deleting the computer account for the CA in AD?

If so, you can try to restore the CA backup to the restored the computer, then check if it helps.

Step-By-Step: Migrating The Active Directory Certificate Service From Windows Server 2008 R2 to 2019
https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-migrating-the-active-directory-certificate-service/ba-p/697674

Tip: You can do similar test in your lab first, if everything is OK, you can do it in your production environment.


Should you have any question or concern, please feel free to let us know.


Best Regards,
Daisy Zhou

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.