| Event Id | 29 |
| Source | Microsoft-Windows-OnlineResponder |
| Description | OnlineResponder Service: For configuration %1, settings could not be loaded. Any OCSP request for this configuration will be rejected.(%2) |
| Event Information | According to Microsoft : Cause : This event is logged when settings could not be loaded. Resolution : Correct revocation configuration problems When the Online Responder service encounters an error while attempting to load its configuration, this can indicate that the revocation configuration has been corrupted. To correct this: Follow the procedure in the "Create a valid revocation configuration" section. If this does not resolve the problem, follow the procedure in the "Delete a revocation configuration from the registry" section, and then follow the procedure in the "Create a valid revocation configuration" section again. If the corrupted revocation configuration occurs on the member of an Array, delete the revocation configuration by using the procedure in the "Delete a revocation configuration from the registry" section, and then use the procedure in the "Synchronize members with an Array controller" section to re-create the revocation configuration. Create a valid revocation configuration To create a valid revocation configuration: 1.Click Start, point to Administrative Tools, and click Online Responder. 2.In the details pane, right-click the revocation configuration identified in the event, and click Delete. 3.In the console tree, click Revocation Configuration. 4.In the Actions pane on the right, click Add Revocation Configuration to start the Add Revocation Configuration Wizard. 5.Provide the information requested in the wizard, and then click Finish and Yes to complete the setup process. If you cannot access the revocation configuration by using the Online Responder snap-in, you need to delete this information directly from the registry. Delete a revocation configuration from the registry To delete a revocation configuration from the registry: 1.On the Online Responder, click Start, type regedit, and then press ENTER. 2.Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OCSPSvc\Responder. 3.Delete the corrupted revocation configuration. Synchronize members with an Array controller To synchronize members with an Array controller: 1.On the Online Responder, Start, point to Administrative Tools, and click Online Responder. 2.In the console tree, click Array Configuration Members. 3.In the Actions pane, click Synchronize Responder Configuration. If the corrupted configuration occurs on an Array controller, you can temporarily make another computer the Array controller, synchronize the Array, and then reset the original computer to be the Array controller. Designate an Array controller To designate an Array controller: 2.In the console tree, click Array ConfigurationMembers. 3.Select the Online Responder that you want to designate as the Array controller. 4.In the Actions pane, click Set as Array Controller. 5.Synchronize the Array member with the corrupt configuration, and then reset the updated Array member as the Array controller. |
| Reference Links | Event ID 29 from Source Microsoft-Windows-OnlineResponder |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.