Elastic Windows Event Explorer


Publisher - Microsoft-Windows-EnrollmentWebService

Event ID 9

Message:

The Certificate Enrollment Web Service is attempting to use renewal-only mode, but certification authority (CA) "%{CAConfig}" does not support this mode. To use renewal-only mode, configure the CA by running the following command on the CA: certutil -setreg policy\editflags +EDITF_ENABLERENEWONBEHALFOF. Otherwise, disable renewal-only mode. If no action is taken, subsequent requests will be rejected.

Event Data:

# Name In Type
Out Type
1 CAConfig win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: EDDJQV73OHY3Q