Knowledge Base

XGEN: KMS Cannot Write Certificate Revocation List

Article ID: 146463

Article Last Modified on 10/28/2006

APPLIES TO

This article was previously published under Q146463

SYMPTOMS

If the Key Management (KM) Server is unable to write the certificate revocation list, the following events are logged:
MSExchange KMS 3013: Unable to get the Microsoft Exchange Key Management Server Site Entry ID when writing the Certificate Revocation List. The error code returned is 8004010f.

MSExchange KMS 3147: Writing of Certificate Revocation List to the Microsoft Exchange Directory while saving the revocation list failed.

CAUSE

This problem occurs if the KM Server service account is not configured correctly.

RESOLUTION

To correct this problem, make sure that the service account for the KM Server is the Exchange service account.

Additional query words: security viewer

Keywords: kbenv KB146463


Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.