Microsoft KB Archive/300867

Knowledge Base

Error Message: The Certification Authority Service Has Not Been Started

Article ID: 300867

Article Last Modified on 1/31/2007

---

APPLIES TO

• Microsoft Windows 2000 Service Pack 1
• Microsoft Windows 2000 Service Pack 2
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Service Pack 1
• Microsoft Windows 2000 Service Pack 2
• Microsoft Windows 2000 Service Pack 2
• Microsoft Windows XP Home Edition
• Microsoft Windows XP Professional

---

This article was previously published under Q300867

SYMPTOMS

When you request a certificate from a Web page through a Web proxy, you may receive the following error messages:

• Your request failed. An error occurred while the server was processing your request.
  
  Contact your administrator for further assistance.

  Access is denied. 0x80070005 (WIN32: 5)
  COM Error Info:
  CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
  LastStatus:
  The operation completed successfully. 0x0 (0)
  Suggested Cause:
  The Certification Authority Service has not been started.
  

  
  

CAUSE

This problem can occur if the computer account for the server on which the Web Proxy service is hosted has not been authorized for delegation.

RESOLUTION

To resolve this problem, on a domain controller (DC) or workstation with the Active Directory administrative tools installed, enable the Web proxy's computer account for delegation:

1. Log on as a domain administrator or equivalent account.
2. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
3. In the left pane, locate the container or organizational unit (OU) on which you want to enable delegation.
4. Right-click the computer account name, and then click Properties.
5. On the General tab, click Trust computer for delegation.
6. Click OK.
7. Quit Active Directory Users and Computers.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

For additional information about Kerberos and delegation, click the article number below to view the article in the Microsoft Knowledge Base:

283201 HOW TO: Use Delegation in Windows 2000 with COM+

266080 Answers to Frequently Asked Kerberos Questions

Keywords: kberrmsg kbtool kbprb KB300867

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.