XGEN: KMS Cannot Write Certificate Revocation List (146463)


The information in this article applies to:

  • Microsoft Exchange Server 4.0
This article was previously published under Q146463

SYMPTOMS

If the Key Management (KM) Server is unable to write the certificate revocation list, the following events are logged:
MSExchange KMS 3013: Unable to get the Microsoft Exchange Key Management Server Site Entry ID when writing the Certificate Revocation List. The error code returned is 8004010f.

MSExchange KMS 3147: Writing of Certificate Revocation List to the Microsoft Exchange Directory while saving the revocation list failed.

CAUSE

This problem occurs if the KM Server service account is not configured correctly.

RESOLUTION

To correct this problem, make sure that the service account for the KM Server is the Exchange service account.
Modification Type:MinorLast Reviewed:4/28/2005
Keywords:kbenv KB146463
©2004 Microsoft Corporation. All rights reserved.