detection.wiki

Microsoft-Windows-CertificationAuthorityClient-CertCli

EventTitleChannelSampleRule
10000Certificate Enrollment Server ServerURL was not able to process the request: …OperationalNN

Event ID 10000: Certificate Enrollment Server ServerURL was not able to process the request: FaultString.

#
Channel
Operational

Message #

Certificate Enrollment Server %1 was not able to process the request: %2

Fields #

NameDescription
ServerURL UnicodeString
FaultString UnicodeString

Provenance

ETW provider GUID 98bf1cd3-583e-4926-95ee-a61bf3f46470

Defined in certcli.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB