| Event Id | 4876 |
| Source | Microsoft-Windows-CertificationAuthority |
| Description | Certificate Services backup started. Backup Type: 1 |
| Event Information | Cause: This event event is only logged if "Backup and restore the CA database" is enabled on the Audit tab of the CA's properties in Certificate Services MMC snap-in and of course if the Certificate Services audit subcategory is enabled with auditpol. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.