Certification Authority Does Not Start and Returns Error Code 0x80004015

ID: Q246208

The information in this article applies to:

Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Server
Microsoft Windows 2000 Datacenter Server

IMPORTANT: This article contains information about editing the registry. Before you edit the registry, make sure you understand how to restore it if a problem occurs. For information about how to do this, view the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

SYMPTOMS

The Windows 2000 Certification Authority service may not start and may return error code 0x80004015 ("The class is configured to run as a security ID different from the caller").

CAUSE

This behavior can occur if the registration for the Distributed Component Object Model (DCOM) interface in either of the following registry locations contains both RunAs and LocalService entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E74-FC88-11D0-B498-00A0C90312F3}

-or-

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E73-FC88-11D0-B498-00A0C90312F3}

When this occurs, the Certification Authority service does not start because it does not expect both values to be set.

RESOLUTION

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys and Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it. If you are running Windows NT, you should also update your Emergency Repair Disk (ERD).

To resolve this issue, remove the RunAs entries under both of the following registry locations:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E74-FC88-11D0-B498-00A0C90312F3}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E73-FC88-11D0-B498-00A0C90312F3}

Make sure that the LocalService entry exists under the following registry locations with a data value of CertSvc:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E74-FC88-11D0-B498-00A0C90312F3}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\{D99E6E73-FC88-11D0-B498-00A0C90312F3}

STATUS

Microsoft has confirmed this to be a problem in the Microsoft products listed at the beginning of this article.

Additional query words:

Keywords : kbenv kberrmsg
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbprb