Event ID 86 in the CertificateServicesClient-CertEnroll log typically indicates a problem with certificate enrollment on the affected computer. Here are a few potential solutions you could try:
- Check the certificate enrollment settings: Check if the certificate enrollment settings on the affected computer are correct. Open the Certificates snap-in, select Personal, and check if the certificate you need is present. If it is not, check if you have selected the correct certificate template in the Certificate Enrollment Policy. You can also try renewing or requesting the certificate again.
- Check the certificate revocation list (CRL): If the certificate you are trying to enroll has been revoked, it may cause this issue. Check the CRL distribution points to make sure they are accessible and up to date.
- Check the network connectivity: Ensure that the affected computer is connected to the network and that it can communicate with the Certificate Authority (CA) server. Check for any network issues that may be preventing the computer from contacting the CA server.
- Update the CA server: If the CA server is outdated, it may not be able to issue the required certificates. Make sure that the CA server is up to date with the latest security updates and patches.
- Check for malware: Run a malware scan on the affected computer to check for any infections that may be causing the issue. Malware can interfere with certificate enrollment and cause problems. If none of these solutions work, you may need to escalate the issue to a higher level of support, such as the vendor's technical support or a third-party consultant. They may be able to provide further assistance in troubleshooting and resolving the issue.