Microsoft KB Archive/246208

From BetaArchive Wiki
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.
Knowledge Base


Certification Authority Does Not Start and Returns Error Code 0x80004015

Article ID: 246208

Article Last Modified on 3/1/2007



APPLIES TO

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server



This article was previously published under Q246208

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry


SYMPTOMS

The Windows 2000 Certification Authority service may not start and may return error code 0x80004015 ("The class is configured to run as a security ID different from the caller").

CAUSE

This behavior can occur if the registration for the Distributed Component Object Model (DCOM) interface in either of the following registry locations contains both RunAs and LocalService entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E74-FC88-11D0-B498-00A0C90312F3}

-or-

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E73-FC88-11D0-B498-00A0C90312F3}


When this occurs, the Certification Authority service does not start because it does not expect both values to be set.

RESOLUTION

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To resolve this issue, remove the RunAs entries under both of the following registry locations:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E74-FC88-11D0-B498-00A0C90312F3}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E73-FC88-11D0-B498-00A0C90312F3}


Make sure that the LocalService entry exists under the following registry locations with a data value of CertSvc:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E74-FC88-11D0-B498-00A0C90312F3}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E73-FC88-11D0-B498-00A0C90312F3}


STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Keywords: kbenv kberrmsg kbprb KB246208