Failed to publish Root Certificate into RootCA on issuing CA

Question

Root CA is a standalone server.
Issuing CA Server joins my domain successfully.
When run this command : certutil -f -dspublish "RootCA.crt" RootCA
It reminds me: "0x8007052e (WIN32: 1326 ERROR_LOGON_FAILURE)"
Are there something wrong with my DC settings about user account policy?

Systems are both Windows Server 2016 DataCenter

Answer 1

Hello @Guangwook Choi

This is a common error produced by attempting the operation with a non-domain account after joining the server to the domain.

Please use certutil -addstore root RootCA.crt and then certutil -verify -urlfetch before running your command.

Hope this helps with your query,

--
--If the reply is helpful, please Upvote and Accept as answer--

Answer 2

Hey @Guangwook Choi

I had the same issue after joining my Issuing CA to the domain. Remote Desktop is how I connect to my Windows Servers (Standard 2016) and I was still using the local credentials for logging in.

Changing my username to: <domain_name>\Administrator and then signing in with the correct password did the trick.

I hope this helps, I know it's a late answer but for those in the future having the same issue and landing on this post, if it works don't hesitate to mark this answer as usefull :-)