Elastic Windows Event Explorer

Publisher - Microsoft-Windows-EnrollmentWebService

Event ID 7


The Certificate Enrollment Web Service is attempting to use renewal-only mode, but certification authority (CA) "%{CAConfig}" does not support this mode. To use renewal-only mode, configure the Certificate Enrollment Web Service to use a CA that is installed on a computer that is running at least Windows Server 2008 R2. Then, configure the CA by running the following command on the CA: certutil -setreg policy\editflags +EDITF_ENABLERENEWONBEHALFOF. Otherwise, disable renewal-only mode. If no action is taken, subsequent requests will be rejected.

Event Data:

# Name In Type
Out Type
1 CAConfig win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: PDJ3BB6TXVG54