Having weird problem on one issuing ca, when I run certutil on that server, it everytime returns 0x8007007e (WIN32/HTTP: 126 ERROR_MOD_NOT_FOUND): certadm.dll and same for certenroll.dll

Any ideas what's causing this?

Hi,

Would you please tell us are there any related error messages in the Event Logs of the problematic CA?

If there are, please post them out for further analyzing.

Best Regards,

Amy

There aren't any errors in the event log. This only happens when certutil.exe is used, for example if I try to run certutil.exe -dump, it outputs everything but the error described above is shown. This doesn't happen on other CAs in the environment.

Hi,

Looks like there is something wrong with the Certutil.exe, please try to replace it with a version from a healthy machine. The Certutil.exe is under System32 folder.

Best Regards,

Amy

The certutil.exe is exactly the same on a working machine, so the problem isn't there...  also certadm.dll and certenroll.dl are exactly the same on a working machine.

Hi Narcoticoo,

The issue should be caused by the server missing some certificate service dll and exe files. You need to capture the Process Monitor to find which dll or exe files are missing:

1) Logon as domain admin and download Process Monitor from the following link:
    URL: < http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx>
2) Extract the ZIP file on the server, restart the computer and then run Processmon.exe
3) While Process Monitor is running, click the microscope icon in the toolbar to stop the capture (CTRL+E) and clear the initial logs (CTRL+X). (Dont close it)

Note: Turn off any network access (including Internet Explorer access, network share access, etc) and turn off 3rd party applications (as many as possible

Capture:
 
a. In Process Monitor window, create a path filter "c:\Windows\system32"

b. Start the capture (CTRL+E).
 
c. Reproduce the issue.
 
d. When the error appears, (in Process Monitor) please stop the capture (CTRL+E), Save (File -> Save ) the Process Monitor log.

Then you can find which files that are missing, copy the missing files from other working server.

Thanks.

• Edited by Bryan Yu-MSFT Wednesday, November 12, 2014 2:33 AM 1
• Marked as answer by Bennie ChenMicrosoft employee, Moderator Thursday, December 04, 2014 9:28 AM
• Unmarked as answer by Narcoticoo Thursday, April 02, 2015 11:12 AM

Any updates?

Nope. I tried looking at procmon already before you suggested it, I didn't find anything missing at that point. I have to check it again.

The CA itself is working just fine, it's just the certutil tool that has the hickups.

Hi , have the issue resoved? If not, please try to change the filter to "contains" and check if it helps.

This is still not resolved. I've followed this guide https://technet.microsoft.com/fi-fi/library/hh824869.aspx?f=255&MSPPError=-2147217396, but still the issue persists... As noted before, procmon does not provide any useful information while running certutil.exe

• Edited by Narcoticoo 2 hours 40 minutes ago