Event ID: 1012

[Guest]

Event ID: 1012
Source: WinLogon
Error: The automatic certificate enrollment subsystem could not access local
resources needed for enrollment. Enrollment will not be performed.
(0x80092023) The string contains an invalid X500 name attribute key, oid,
value or delimiter.

I have begun receiving this error and am unable to track down a fix for it.
All necessary services appear to be started and it only seems to happen on
one user. Would that point to a corrupt profile? I only receive this error on
one of our many servers so it could be a corrupt profile. Has anyone else
seen this exact error and know a fix? Thank you.

 

[Crouchie1998]

This maybe what you are looking for:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/advcert.mspx

Halfway down the page it lists the error:

Certreq -new fails with error 0x80092023
This error may occur if the subject name was not specified in an X.500
format. You cannot specify just the raw string as the common name. You must
at least add the prefix "CN=" to the string.

So, that particular user has a certificate without a common name. Go into
the certificate store...

I hope this helps

Crouchie1998
BA (HONS) MCP MCSE

 

[Guest]

Thank you for the response. The user was trying to setup certificates and
encryption months ago which I believe is the likely the time this all
started. The certificate components have since been removed and services are
obviously no longer there. Where would I look for the certificate store?
Thank you.

 

[Guest]

Sorry for the second post... I have viewed the Certificates through MMC and
cannot find any thing pointing to his account. I do see some expired certs
that he likely created. I used ADSIedit.msc to view all properties of his
account and in the UserCert, UserCertificate and AttributeCertificate are all
blank. Is this the correct method for checking this? Thanks.

-Kevin