Microsoft-Windows-CertificateServicesClient-AutoEnrollment
23 events across 2 channels
Event ID 1 —
Fields #
| Name | Description |
|---|---|
Context UnicodeString | — |
StoreName UnicodeString | — |
LdapStore UnicodeString | — |
ErrorCode UnicodeString | — |
ErrorMsg UnicodeString | — |
Event ID 2 —
Fields #
| Name | Description |
|---|---|
Context UnicodeString | — |
Event ID 3 —
Fields #
| Name | Description |
|---|---|
Context UnicodeString | — |
Event ID 4 —
Fields #
| Name | Description |
|---|---|
Context UnicodeString | — |
Event ID 5 —
Fields #
| Name | Description |
|---|---|
Context UnicodeString | — |
Event ID 6 — Automatic certificate enrollment for local system failed (0x8007054b) The specified domain either does not exist or could not be contacted.
#Fields #
| Name | Description |
|---|---|
Context | — |
ErrorCode | — |
ErrorMsg | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-CertificateServicesClient-AutoEnrollment",
"guid": "{F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43}",
"event_source_name": "AutoEnrollment",
"event_id": 6,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2022-04-07T08:15:12.653840+00:00",
"event_record_id": 112,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "Application",
"computer": "WIN-FPV0DSIC9O6.lab.local",
"security": {
"user_id": ""
}
},
"event_data": {
"Context": "local system",
"ErrorCode": "0x8007054b",
"ErrorMsg": "The specified domain either does not exist or could not be contacted.\r\n"
},
"message": "Automatic certificate enrollment for local system failed (0x8007054b) The specified domain either does not exist or could not be contacted.\r\n."
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 6 —
Fields #
| Name | Description |
|---|---|
Context UnicodeString | — |
ErrorCode UnicodeString | — |
ErrorMsg UnicodeString | — |
Event ID 15 —
Fields #
| Name | Description |
|---|---|
Context UnicodeString | — |
ErrorCode UnicodeString | — |
ErrorMsg UnicodeString | — |
Event ID 64 —
Fields #
| Name | Description |
|---|---|
Context UnicodeString | — |
ObjId UnicodeString | — |
Event ID 1073741825 — Automatic certificate enrollment for Context failed to download certificates for StoreName store from LdapStore (ErrorCode).
Description
Automatic certificate enrollment for Context failed to download certificates for StoreName store from LdapStore (ErrorCode). ErrorMsg.
Message #
Fields #
| Name | Description |
|---|---|
Context UnicodeString | Automatic certificate enrollment for |
StoreName UnicodeString | failed to download certificates for |
LdapStore UnicodeString | store from |
ErrorCode UnicodeString | — |
ErrorMsg UnicodeString | — |