Issuing CA fail to start

Question

Hi Everyone,

Trying to migrate 2 tier offline CA from 2012R2 to 2020 and encountered issues.

The root CA is okay but the enterprise issuing CA is not. After importing the database, the issuing CA fail to start with the following error:

The system cannot find the file specified. 0x2 (WIN32: 2 ERROR_FILE_NOT_FOUND)

Can anyone help? Thanks.

KHH

Answer 1

This might be helpful LINK

Answer 2

Hello KHH

I would invite you to check the next link to ensure that all the permissions are configured correctly:

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee126140(v=ws.10)?redirectedfrom=MSDN#granting-permissions-on-aia-and-cdp-containers

Most likely the issue is that it doesn't find the file due to a lack of access permission.

Furthermore, for the same issue, there is a previous thread with different instructions for troubleshooting. Check it here: https://social.technet.microsoft.com/Forums/en-US/107d431f-3003-4ab2-94f7-bed355d7d43d/active-directory-certificate-services-wont-start-error-100?forum=winserversecurity

------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--

Answer 3

Thanks, everyone,

Issue resolved. It was a permission issue.