| Event Id | 130 |
| Source | Microsoft-Windows-CertificationAuthority |
| Description | Active Directory Certificate Services could not create a certificate revocation list (CRL). %1. This may cause applications that need to check the revocation status of certificates issued by this CA to fail. You can recreate the CRL manually by running the following command: "certutil -CRL". If the problem persists, restart Certificate Services. |
| Event Information | According to Microsoft : Cause : This event is logged when Active Directory Certificate Services could not create a certificate revocation list. Resolution : Create a certificate revocation list Active Directory Certificate Services (AD CS) could not create a certificate revocation list (CRL), which may cause applications that need to check the revocation status of certificates issued by this certification authority (CA) to fail. The event log message should contain more specific information regarding the CRL creation failure. To correct this error: 1.Fix any problems listed in the event log message. 2.Try to create a CRL manually. Note To perform this procedure, you must have Manage CA permission, or you must have been delegated the appropriate authority. Create a CRL To manually create a CRL by using the Certification Authority snap-in: 1.On the computer hosting the CA, clickStart, point toAdministrative Tools, andclick Certification Authority. 2.In the console tree, clickRevoked Certificates. 3.On theAction menu, point toAll Tasks, and clickPublish. 4.SelectNew CRL to overwrite the previously published CRL, or selectDelta CRL only to publish a current delta CRL. 5.ClickOK. |
| Reference Links | Event ID 130 from Source CertificationAuthority |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.