• Management Pack:  Active Directory Certificate Services
• MP Version:  7.1.10100.0
• Released:  3/10/2015
• Publisher:  Microsoft

Rules

Name	Enabled	Target Class	Description
Collection Rule for event with source CertificationAuthority and ID 10	onEssentialMonitoring	Certificate Service (2012)	Certificate Services cannot verify revocation status.
Collection Rule for event with source CertificationAuthority and ID 10	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services cannot verify revocation status.
Collection Rule for event with source CertificationAuthority and ID 100	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: CA certificate.
Collection Rule for event with source CertificationAuthority and ID 100	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: CA certificate.
Collection Rule for event with source CertificationAuthority and ID 101	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services created CA cross certificate.
Collection Rule for event with source CertificationAuthority and ID 101	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services created CA cross certificate.
Collection Rule for event with source CertificationAuthority and ID 102	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not create a cross certificate.
Collection Rule for event with source CertificationAuthority and ID 102	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not create a cross certificate.
Collection Rule for event with source CertificationAuthority and ID 103	onEssentialMonitoring	Certificate Service (2012)	A root CA certificate was added to the local enterprise root store.
Collection Rule for event with source CertificationAuthority and ID 103	onEssentialMonitoring	Certificate Service (2012 R2)	A root CA certificate was added to the local enterprise root store.
Collection Rule for event with source CertificationAuthority and ID 104	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services published certificate.
Collection Rule for event with source CertificationAuthority and ID 104	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services published certificate.
Collection Rule for event with source CertificationAuthority and ID 105	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services deleted invalid certificate.
Collection Rule for event with source CertificationAuthority and ID 105	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services deleted invalid certificate.
Collection Rule for event with source CertificationAuthority and ID 106	onEssentialMonitoring	Certificate Service (2012)	Certificate Services cannot add a CA certificate to Active Directory
Collection Rule for event with source CertificationAuthority and ID 106	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services cannot add a CA certificate to Active Directory
Collection Rule for event with source CertificationAuthority and ID 107	onEssentialMonitoring	Certificate Service (2012)	Certificate Services cannot delete a CA certificate from Active Directory.
Collection Rule for event with source CertificationAuthority and ID 107	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services cannot delete a CA certificate from Active Directory.
Collection Rule for event with source CertificationAuthority and ID 108	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services could not delete a Certificate for request from specified location.
Collection Rule for event with source CertificationAuthority and ID 108	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services could not delete a Certificate for request from specified location.
Collection Rule for event with source CertificationAuthority and ID 109	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services could not delete a Certificate for request from the specified location and server.
Collection Rule for event with source CertificationAuthority and ID 109	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services could not delete a Certificate for request from the specified location and server.
Collection Rule for event with source CertificationAuthority and ID 110	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not initialize performance counters.
Collection Rule for event with source CertificationAuthority and ID 110	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not initialize performance counters.
Collection Rule for event with source CertificationAuthority and ID 127	onEssentialMonitoring	Certificate Service (2012)	Key recovery agent certificate is about to expire.
Collection Rule for event with source CertificationAuthority and ID 127	onEssentialMonitoring	Certificate Service (2012 R2)	Key recovery agent certificate is about to expire.
Collection Rule for event with source CertificationAuthority and ID 128	onEssentialMonitoring	Certificate Service (2012)	Certificate Services may not be configured to enable revocation checking for all issued certificates
Collection Rule for event with source CertificationAuthority and ID 128	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services may not be configured to enable revocation checking for all issued certificates
Collection Rule for event with source CertificationAuthority and ID 129	onEssentialMonitoring	Certificate Service (2012)	An invalid OID has been detected in the EnabledEKUForDefinedCACert configuration setting.
Collection Rule for event with source CertificationAuthority and ID 129	onEssentialMonitoring	Certificate Service (2012 R2)	An invalid OID has been detected in the EnabledEKUForDefinedCACert configuration setting.
Collection Rule for event with source CertificationAuthority and ID 130	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not create a certificate revocation list (CRL).
Collection Rule for event with source CertificationAuthority and ID 130	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not create a certificate revocation list (CRL).
Collection Rule for event with source CertificationAuthority and ID 131	onEssentialMonitoring	Certificate Service (2012)	An invalid OID has been detected in the EKUOIDsForPublishExpiredCertInCRL configuration setting.
Collection Rule for event with source CertificationAuthority and ID 131	onEssentialMonitoring	Certificate Service (2012 R2)	An invalid OID has been detected in the EKUOIDsForPublishExpiredCertInCRL configuration setting.
Collection Rule for event with source CertificationAuthority and ID 132	onEssentialMonitoring	Certificate Service (2012)	Certificate Services failed to decrypt
Collection Rule for event with source CertificationAuthority and ID 132	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services failed to decrypt
Collection Rule for event with source CertificationAuthority and ID 16	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: OLE.
Collection Rule for event with source CertificationAuthority and ID 16	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: OLE.
Collection Rule for event with source CertificationAuthority and ID 17	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: database connection.
Collection Rule for event with source CertificationAuthority and ID 17	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: database connection.
Collection Rule for event with source CertificationAuthority and ID 19	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: registry problem.
Collection Rule for event with source CertificationAuthority and ID 19	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: registry problem.
Collection Rule for event with source CertificationAuthority and ID 20	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: registry problem.
Collection Rule for event with source CertificationAuthority and ID 20	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: registry problem.
Collection Rule for event with source CertificationAuthority and ID 21	onEssentialMonitoring	Certificate Service (2012)	Certificate Services failed to process a request.
Collection Rule for event with source CertificationAuthority and ID 21	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services failed to process a request.
Collection Rule for event with source CertificationAuthority and ID 22	onEssentialMonitoring	Certificate Service (2012)	Certificate Services failed to process a request.
Collection Rule for event with source CertificationAuthority and ID 22	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services failed to process a request.
Collection Rule for event with source CertificationAuthority and ID 23	onEssentialMonitoring	Certificate Service (2012)	A certificate request could not be processed because of bad certificate input data.
Collection Rule for event with source CertificationAuthority and ID 23	onEssentialMonitoring	Certificate Service (2012 R2)	A certificate request could not be processed because of bad certificate input data.
Collection Rule for event with source CertificationAuthority and ID 25	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services revoked the certificate.
Collection Rule for event with source CertificationAuthority and ID 25	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services revoked the certificate.
Collection Rule for event with source CertificationAuthority and ID 26	onEssentialMonitoring	Certificate Service (2012)	Certificate Services service started
Collection Rule for event with source CertificationAuthority and ID 26	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services service started
Collection Rule for event with source CertificationAuthority and ID 27	onEssentialMonitoring	Certificate Service (2012)	CA installation incomplete.
Collection Rule for event with source CertificationAuthority and ID 27	onEssentialMonitoring	Certificate Service (2012 R2)	CA installation incomplete.
Collection Rule for event with source CertificationAuthority and ID 28	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: registry problem.
Collection Rule for event with source CertificationAuthority and ID 28	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: registry problem.
Collection Rule for event with source CertificationAuthority and ID 29	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services issued a new Certificate Revocation List.
Collection Rule for event with source CertificationAuthority and ID 29	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services issued a new Certificate Revocation List.
Collection Rule for event with source CertificationAuthority and ID 3	onEssentialMonitoring	Certificate Service (2012)	Certificate Services failed to process a request.
Collection Rule for event with source CertificationAuthority and ID 3	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services failed to process a request.
Collection Rule for event with source CertificationAuthority and ID 33	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: service thread.
Collection Rule for event with source CertificationAuthority and ID 33	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: service thread.
Collection Rule for event with source CertificationAuthority and ID 34	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: RPC
Collection Rule for event with source CertificationAuthority and ID 34	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: RPC
Collection Rule for event with source CertificationAuthority and ID 35	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: OLE.
Collection Rule for event with source CertificationAuthority and ID 35	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: OLE.
Collection Rule for event with source CertificationAuthority and ID 38	onEssentialMonitoring	Certificate Service (2012)	Certificate Services service was stopped
Collection Rule for event with source CertificationAuthority and ID 38	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services service was stopped
Collection Rule for event with source CertificationAuthority and ID 39	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: DCOM registration
Collection Rule for event with source CertificationAuthority and ID 39	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: DCOM registration
Collection Rule for event with source CertificationAuthority and ID 40	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: class factories failed to start.
Collection Rule for event with source CertificationAuthority and ID 40	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: class factories failed to start.
Collection Rule for event with source CertificationAuthority and ID 42	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: CA certificate.
Collection Rule for event with source CertificationAuthority and ID 42	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: CA certificate.
Collection Rule for event with source CertificationAuthority and ID 43	onEssentialMonitoring	Certificate Service (2012)	The policy module encountered an error.
Collection Rule for event with source CertificationAuthority and ID 43	onEssentialMonitoring	Certificate Service (2012 R2)	The policy module encountered an error.
Collection Rule for event with source CertificationAuthority and ID 44	onEssentialMonitoring	Certificate Service (2012)	The policy module encountered an error.
Collection Rule for event with source CertificationAuthority and ID 44	onEssentialMonitoring	Certificate Service (2012 R2)	The policy module encountered an error.
Collection Rule for event with source CertificationAuthority and ID 45	onEssentialMonitoring	Certificate Service (2012)	An exit module has returned a severe error.
Collection Rule for event with source CertificationAuthority and ID 45	onEssentialMonitoring	Certificate Service (2012 R2)	An exit module has returned a severe error.
Collection Rule for event with source CertificationAuthority and ID 46	onEssentialMonitoring	Certificate Service (2012)	An exit module has returned a severe error.
Collection Rule for event with source CertificationAuthority and ID 46	onEssentialMonitoring	Certificate Service (2012 R2)	An exit module has returned a severe error.
Collection Rule for event with source CertificationAuthority and ID 48	onEssentialMonitoring	Certificate Service (2012)	Revocation cannot be checked
Collection Rule for event with source CertificationAuthority and ID 48	onEssentialMonitoring	Certificate Service (2012 R2)	Revocation cannot be checked
Collection Rule for event with source CertificationAuthority and ID 49	onEssentialMonitoring	Certificate Service (2012)	Revocation cannot be checked
Collection Rule for event with source CertificationAuthority and ID 49	onEssentialMonitoring	Certificate Service (2012 R2)	Revocation cannot be checked
Collection Rule for event with source CertificationAuthority and ID 5	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not find essential registry information.
Collection Rule for event with source CertificationAuthority and ID 5	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not find essential registry information.
Collection Rule for event with source CertificationAuthority and ID 51	onEssentialMonitoring	Certificate Service (2012)	A certificate in the chain for the CA certificate has been revoked.
Collection Rule for event with source CertificationAuthority and ID 51	onEssentialMonitoring	Certificate Service (2012 R2)	A certificate in the chain for the CA certificate has been revoked.
Collection Rule for event with source CertificationAuthority and ID 52	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services issued a certificate.
Collection Rule for event with source CertificationAuthority and ID 52	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services issued a certificate.
Collection Rule for event with source CertificationAuthority and ID 53	onEssentialMonitoring	Certificate Service (2012)	A certificate request has been denied.
Collection Rule for event with source CertificationAuthority and ID 53	onEssentialMonitoring	Certificate Service (2012 R2)	A certificate request has been denied.
Collection Rule for event with source CertificationAuthority and ID 54	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services left request pending in the queue.
Collection Rule for event with source CertificationAuthority and ID 54	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services left request pending in the queue.
Collection Rule for event with source CertificationAuthority and ID 55	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services unrevoked the certificate.
Collection Rule for event with source CertificationAuthority and ID 55	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services unrevoked the certificate.
Collection Rule for event with source CertificationAuthority and ID 56	onEssentialMonitoring	Certificate Service (2012)	A certificate request has been denied.
Collection Rule for event with source CertificationAuthority and ID 56	onEssentialMonitoring	Certificate Service (2012 R2)	A certificate request has been denied.
Collection Rule for event with source CertificationAuthority and ID 57	onEssentialMonitoring	Certificate Service (2012)	A certificate request has been denied.
Collection Rule for event with source CertificationAuthority and ID 57	onEssentialMonitoring	Certificate Service (2012 R2)	A certificate request has been denied.
Collection Rule for event with source CertificationAuthority and ID 58	onEssentialMonitoring	Certificate Service (2012)	A certificate in the chain for the CA certificate has expired.
Collection Rule for event with source CertificationAuthority and ID 58	onEssentialMonitoring	Certificate Service (2012)	A certificate in the chain for the CA certificate has expired.
Collection Rule for event with source CertificationAuthority and ID 58	onEssentialMonitoring	Certificate Service (2012 R2)	A certificate in the chain for the CA certificate has expired.
Collection Rule for event with source CertificationAuthority and ID 58	onEssentialMonitoring	Certificate Service (2012 R2)	A certificate in the chain for the CA certificate has expired.
Collection Rule for event with source CertificationAuthority and ID 59	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not connect to Active Directory.
Collection Rule for event with source CertificationAuthority and ID 59	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not connect to Active Directory.
Collection Rule for event with source CertificationAuthority and ID 6	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services issued a certificate.
Collection Rule for event with source CertificationAuthority and ID 6	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services issued a certificate.
Collection Rule for event with source CertificationAuthority and ID 60	onEssentialMonitoring	Certificate Service (2012)	Certificate Services refused to process an extremely long certificate request.
Collection Rule for event with source CertificationAuthority and ID 60	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services refused to process an extremely long certificate request.
Collection Rule for event with source CertificationAuthority and ID 62	onEssentialMonitoring	Certificate Service (2012)	Certificate Services has reverted to default certificate revocation list (CRL) publication values.
Collection Rule for event with source CertificationAuthority and ID 62	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services has reverted to default certificate revocation list (CRL) publication values.
Collection Rule for event with source CertificationAuthority and ID 63	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start.
Collection Rule for event with source CertificationAuthority and ID 63	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start.
Collection Rule for event with source CertificationAuthority and ID 64	onEssentialMonitoring	Certificate Service (2012)	Certificate Services cannot publish enrollment access changes to Active Directory.
Collection Rule for event with source CertificationAuthority and ID 64	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services cannot publish enrollment access changes to Active Directory.
Collection Rule for event with source CertificationAuthority and ID 65	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not publish a certificate revocation list (CRL).
Collection Rule for event with source CertificationAuthority and ID 65	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not publish a certificate revocation list (CRL).
Collection Rule for event with source CertificationAuthority and ID 66	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not publish a certificate revocation list (CRL).
Collection Rule for event with source CertificationAuthority and ID 66	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not publish a certificate revocation list (CRL).
Collection Rule for event with source CertificationAuthority and ID 67	onEssentialMonitoring	Certificate Service (2012)	Certificate Services will not publish a certificate revocation list (CRL) until the next CRL is issued.
Collection Rule for event with source CertificationAuthority and ID 67	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services will not publish a certificate revocation list (CRL) until the next CRL is issued.
Collection Rule for event with source CertificationAuthority and ID 68	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services successfully published Base CRL(s).
Collection Rule for event with source CertificationAuthority and ID 68	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services successfully published Base CRL(s).
Collection Rule for event with source CertificationAuthority and ID 69	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services successfully published Delta CRL(s).
Collection Rule for event with source CertificationAuthority and ID 69	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services successfully published Delta CRL(s).
Collection Rule for event with source CertificationAuthority and ID 7	onEssentialMonitoring	Certificate Service (2012)	A certificate request has been denied.
Collection Rule for event with source CertificationAuthority and ID 7	onEssentialMonitoring	Certificate Service (2012 R2)	A certificate request has been denied.
Collection Rule for event with source CertificationAuthority and ID 71	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services successfully published Base CRL(s) to server.
Collection Rule for event with source CertificationAuthority and ID 71	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services successfully published Base CRL(s) to server.
Collection Rule for event with source CertificationAuthority and ID 72	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services successfully published Delta CRL(s) to server.
Collection Rule for event with source CertificationAuthority and ID 72	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services successfully published Delta CRL(s) to server.
Collection Rule for event with source CertificationAuthority and ID 73	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services successfully published Base and Delta CRL(s) to server.
Collection Rule for event with source CertificationAuthority and ID 73	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services successfully published Base and Delta CRL(s) to server.
Collection Rule for event with source CertificationAuthority and ID 74	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not publish a certificate revocation list (CRL).
Collection Rule for event with source CertificationAuthority and ID 74	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not publish a certificate revocation list (CRL).
Collection Rule for event with source CertificationAuthority and ID 75	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not publish a certificate revocation list (CRL).
Collection Rule for event with source CertificationAuthority and ID 75	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not publish a certificate revocation list (CRL).
Collection Rule for event with source CertificationAuthority and ID 76	onEssentialMonitoring	Certificate Service (2012)	The Policy Module logged information.
Collection Rule for event with source CertificationAuthority and ID 76	onEssentialMonitoring	Certificate Service (2012 R2)	The Policy Module logged information.
Collection Rule for event with source CertificationAuthority and ID 77	onEssentialMonitoring	Certificate Service (2012)	The policy module encountered a warning.
Collection Rule for event with source CertificationAuthority and ID 77	onEssentialMonitoring	Certificate Service (2012 R2)	The policy module encountered a warning.
Collection Rule for event with source CertificationAuthority and ID 78	onEssentialMonitoring	Certificate Service (2012)	The policy module encountered an error.
Collection Rule for event with source CertificationAuthority and ID 78	onEssentialMonitoring	Certificate Service (2012 R2)	The policy module encountered an error.
Collection Rule for event with source CertificationAuthority and ID 79	onEssentialMonitoring	Certificate Service (2012)	Certificate Services failed to publish an end-entity certificate.
Collection Rule for event with source CertificationAuthority and ID 79	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services failed to publish an end-entity certificate.
Collection Rule for event with source CertificationAuthority and ID 8	onEssentialMonitoring	Certificate Service (2012)	Active Directory Certificate Services left request pending in the queue.
Collection Rule for event with source CertificationAuthority and ID 8	onEssentialMonitoring	Certificate Service (2012 R2)	Active Directory Certificate Services left request pending in the queue.
Collection Rule for event with source CertificationAuthority and ID 80	onEssentialMonitoring	Certificate Service (2012)	Certificate Services failed to publish an end-entity certificate.
Collection Rule for event with source CertificationAuthority and ID 80	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services failed to publish an end-entity certificate.
Collection Rule for event with source CertificationAuthority and ID 81	onEssentialMonitoring	Certificate Service (2012)	Certificate Services key archival is not supported on this version of Windows Server.
Collection Rule for event with source CertificationAuthority and ID 81	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services key archival is not supported on this version of Windows Server.
Collection Rule for event with source CertificationAuthority and ID 82	onEssentialMonitoring	Certificate Service (2012)	Certificate Services encountered an error loading key recovery agent certificates.
Collection Rule for event with source CertificationAuthority and ID 82	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services encountered an error loading key recovery agent certificates.
Collection Rule for event with source CertificationAuthority and ID 83	onEssentialMonitoring	Certificate Service (2012)	Certificate Services encountered an error loading key recovery agent certificates.
Collection Rule for event with source CertificationAuthority and ID 83	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services encountered an error loading key recovery agent certificates.
Collection Rule for event with source CertificationAuthority and ID 84	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not use a key recovery agent certificate.
Collection Rule for event with source CertificationAuthority and ID 84	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not use a key recovery agent certificate.
Collection Rule for event with source CertificationAuthority and ID 85	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not use a key recovery agent certificate.
Collection Rule for event with source CertificationAuthority and ID 85	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not use a key recovery agent certificate.
Collection Rule for event with source CertificationAuthority and ID 86	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not use the specified provider for encryption keys.
Collection Rule for event with source CertificationAuthority and ID 86	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not use the specified provider for encryption keys.
Collection Rule for event with source CertificationAuthority and ID 87	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not use the specified provider for encryption keys.
Collection Rule for event with source CertificationAuthority and ID 87	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not use the specified provider for encryption keys.
Collection Rule for event with source CertificationAuthority and ID 88	onEssentialMonitoring	Certificate Service (2012)	Certificate Services switched to the default provider for encryption keys.
Collection Rule for event with source CertificationAuthority and ID 88	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services switched to the default provider for encryption keys.
Collection Rule for event with source CertificationAuthority and ID 9	onEssentialMonitoring	Certificate Service (2012)	Certificate Services did not start: external policy module.
Collection Rule for event with source CertificationAuthority and ID 9	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services did not start: external policy module.
Collection Rule for event with source CertificationAuthority and ID 90	onEssentialMonitoring	Certificate Service (2012)	Certificate Services detected an exception.
Collection Rule for event with source CertificationAuthority and ID 90	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services detected an exception.
Collection Rule for event with source CertificationAuthority and ID 91	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not connect to Active Directory.
Collection Rule for event with source CertificationAuthority and ID 91	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not connect to Active Directory.
Collection Rule for event with source CertificationAuthority and ID 92	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not update security permissions.
Collection Rule for event with source CertificationAuthority and ID 92	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not update security permissions.
Collection Rule for event with source CertificationAuthority and ID 93	onEssentialMonitoring	Certificate Service (2012)	Certificate Services cannot find the CA certificate in the NTAuth store.
Collection Rule for event with source CertificationAuthority and ID 93	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services cannot find the CA certificate in the NTAuth store.
Collection Rule for event with source CertificationAuthority and ID 94	onEssentialMonitoring	Certificate Service (2012)	Certificate Services cannot open the NTAuth store.
Collection Rule for event with source CertificationAuthority and ID 94	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services cannot open the NTAuth store.
Collection Rule for event with source CertificationAuthority and ID 95	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not start: security permissions have been corrupted.
Collection Rule for event with source CertificationAuthority and ID 95	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not start: security permissions have been corrupted.
Collection Rule for event with source CertificationAuthority and ID 96	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not create an encryption certificate.
Collection Rule for event with source CertificationAuthority and ID 96	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not create an encryption certificate.
Collection Rule for event with source CertificationAuthority and ID 98	onEssentialMonitoring	Certificate Service (2012)	Certificate Services encountered an error loading key recovery agent certificates.
Collection Rule for event with source CertificationAuthority and ID 98	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services encountered an error loading key recovery agent certificates.
Collection Rule for event with source CertificationAuthority and ID 99	onEssentialMonitoring	Certificate Service (2012)	Certificate Services could not create a cross certificate.
Collection Rule for event with source CertificationAuthority and ID 99	onEssentialMonitoring	Certificate Service (2012 R2)	Certificate Services could not create a cross certificate.
Collection Rule for event with source OnlineResponder and ID 17	onEssentialMonitoring	Certificate Service (2012)	Online Responder service started
Collection Rule for event with source OnlineResponder and ID 17	onEssentialMonitoring	Certificate Service (2012 R2)	Online Responder service started
Collection Rule for event with source OnlineResponder and ID 18	onEssentialMonitoring	Certificate Service (2012)	The Online Responder service was stopped
Collection Rule for event with source OnlineResponder and ID 18	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder service was stopped
Collection Rule for event with source OnlineResponder and ID 20	onEssentialMonitoring	Certificate Service (2012)	The Online Responder service failed to start.
Collection Rule for event with source OnlineResponder and ID 20	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder service failed to start.
Collection Rule for event with source OnlineResponder and ID 22	onEssentialMonitoring	Certificate Service (2012)	The Online Responder service did not process a very long request.
Collection Rule for event with source OnlineResponder and ID 22	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder service did not process a very long request.
Collection Rule for event with source OnlineResponder and ID 23	onEssentialMonitoring	Certificate Service (2012)	An Online Responder service signing certificate cannot be found.
Collection Rule for event with source OnlineResponder and ID 23	onEssentialMonitoring	Certificate Service (2012 R2)	An Online Responder service signing certificate cannot be found.
Collection Rule for event with source OnlineResponder and ID 25	onEssentialMonitoring	Certificate Service (2012)	The Online Responder service signing certificate is about to expire.
Collection Rule for event with source OnlineResponder and ID 25	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder service signing certificate is about to expire.
Collection Rule for event with source OnlineResponder and ID 26	onEssentialMonitoring	Certificate Service (2012)	The Online Responder service certificate has expired.
Collection Rule for event with source OnlineResponder and ID 26	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder service certificate has expired.
Collection Rule for event with source OnlineResponder and ID 27	onEssentialMonitoring	Certificate Service (2012)	The Online Responder failed to renew a signing certificate
Collection Rule for event with source OnlineResponder and ID 27	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder failed to renew a signing certificate
Collection Rule for event with source OnlineResponder and ID 29	onEssentialMonitoring	Certificate Service (2012)	Online Responder service configuration problem.
Collection Rule for event with source OnlineResponder and ID 29	onEssentialMonitoring	Certificate Service (2012 R2)	Online Responder service configuration problem.
Collection Rule for event with source OnlineResponder and ID 31	onEssentialMonitoring	Certificate Service (2012)	Online Responder service performance counters failed to initialize.
Collection Rule for event with source OnlineResponder and ID 31	onEssentialMonitoring	Certificate Service (2012 R2)	Online Responder service performance counters failed to initialize.
Collection Rule for event with source OnlineResponder and ID 33	onEssentialMonitoring	Certificate Service (2012)	The Online Responder service encountered an error generating an enrollment request for a signing certificate.
Collection Rule for event with source OnlineResponder and ID 33	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder service encountered an error generating an enrollment request for a signing certificate.
Collection Rule for event with source OnlineResponder and ID 34	onEssentialMonitoring	Certificate Service (2012)	The Online Responder service encountered an error submitting an enrollment request for a signing certificate.
Collection Rule for event with source OnlineResponder and ID 34	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder service encountered an error submitting an enrollment request for a signing certificate.
Collection Rule for event with source OnlineResponder and ID 35	onEssentialMonitoring	Certificate Service (2012)	The Online Responder service encountered an error while installing a signing certificate.
Collection Rule for event with source OnlineResponder and ID 35	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder service encountered an error while installing a signing certificate.
Collection Rule for event with source OnlineResponderRevocationProvider and ID 16	onEssentialMonitoring	Certificate Service (2012)	The Online Responder service could not access a certificate revocation list.
Collection Rule for event with source OnlineResponderRevocationProvider and ID 16	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder service could not access a certificate revocation list.
Collection Rule for event with source OnlineResponderRevocationProvider and ID 17	onEssentialMonitoring	Certificate Service (2012)	The Online Responder service could not access a certificate revocation list.
Collection Rule for event with source OnlineResponderRevocationProvider and ID 17	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder service could not access a certificate revocation list.
Collection Rule for event with source OnlineResponderRevocationProvider and ID 18	onEssentialMonitoring	Certificate Service (2012)	The Online Responder service is attempting to use an invalid delta CRL.
Collection Rule for event with source OnlineResponderRevocationProvider and ID 18	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder service is attempting to use an invalid delta CRL.
Collection Rule for event with source OnlineResponderWebProxy and ID 17	onEssentialMonitoring	Certificate Service (2012)	Online Responder web proxy failed to start
Collection Rule for event with source OnlineResponderWebProxy and ID 17	onEssentialMonitoring	Certificate Service (2012 R2)	Online Responder web proxy failed to start
Collection Rule for event with source OnlineResponderWebProxy and ID 18	onEssentialMonitoring	Certificate Service (2012)	Online Responder web proxy started
Collection Rule for event with source OnlineResponderWebProxy and ID 18	onEssentialMonitoring	Certificate Service (2012 R2)	Online Responder web proxy started
Collection Rule for event with source OnlineResponderWebProxy and ID 19	onEssentialMonitoring	Certificate Service (2012)	The Online Responder web proxy was stopped.
Collection Rule for event with source OnlineResponderWebProxy and ID 19	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder web proxy was stopped.
Collection Rule for event with source OnlineResponderWebProxy and ID 20	onEssentialMonitoring	Certificate Service (2012)	The Online Responder web proxy corrected an invalid configuration.
Collection Rule for event with source OnlineResponderWebProxy and ID 20	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder web proxy corrected an invalid configuration.
Collection Rule for event with source OnlineResponderWebProxy and ID 21	onEssentialMonitoring	Certificate Service (2012)	The Online Responder web proxy did not process a very long request.
Collection Rule for event with source OnlineResponderWebProxy and ID 21	onEssentialMonitoring	Certificate Service (2012 R2)	The Online Responder web proxy did not process a very long request.

See Also for Active Directory Certificate Services Management Pack

• Overview
• Files (5)
• References (12)
• Versions (2)
• Unit Monitors (10)
• Discoveries (5)
• Classes (7)
• Run As Profiles (0)

Downloads for Active Directory Certificate Services Management Pack

• Management Pack Inventory
• Management Pack
• Disabled Discoveries Management Pack
• Disabled Unit Monitors Management Pack
• Disabled Rules Management Pack