I get this error every hour if I don't run certutil -CRL on my Windows 2008 R2 server. It's fine for a few days then it starts again. EVENT # 91574 EVENT LOG Application EVENT TYPE Error OPCODE Info SOURCE Microsoft-Windows-CertificationAuthority EVENT ID 130 USERNAME NT AUTHORITY\SYSTEM COMPUTERNAME NOVUS DATE / TIME 3/30/2011 2:59:12 PM MESSAGE Active Directory Certificate Services could not create a certificate revocation list. The parameter is incorrect. 0x80070057 (WIN32: 87). This may cause applications that need to check the revocation status of certificates issued by this CA to fail. You can recreate the certificate revocation list manually by running the following command: "certutil -CRL". If the problem persists, restart Certificate Services.

Hello, if http://technet.microsoft.com/en-us/library/dd299845(WS.10).aspx doesn't help please use the security forum instead this one: http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.