Article ID: 273037 - View products that this article applies to.
This article was previously published under Q273037
The following error message is generated in Event Viewer in the Application log when you attempt to start Windows 2000 Certificate Services on a subordinate certification authority (CA):
The following event is also generated in the System log:
Event Source: CertSvc
Event ID: 27
Event Type: Error
Certificate Services did not start: Hierarchical setup is incomplete. Use the request file %Systemdrive%:\Name of subordinate CA.req to obtain a certificate for this Certificate Server, place it in %Systemdrive%:\Name of subordinate CA.crt, and run the Certificate Server Hierarchy Configuration tool to complete the installation.
Your attempt to manually start the Certificate Services generates the following error message:
Event Source: Service Control Manager
Event ID: 7023
Event Type: Error
The Certificate Services service terminated with the following error: Installation suspended, incomplete.
Could not start the Certificate Services service on local computer.
Error 1604: Installation suspended, incomplete.
This problem can occur if a certificate that is issued by the root CA has not been installed correctly. Even though you can right-click the certificate (which is downloaded from the root CA) and use the Install Certificate option, this method is not the correct method to install a CA certificate. If you use this method, it can cause the error messages that are described in the "Symptoms" section of this article.
To resolve this problem, you must properly configure the subordinate CA:
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
The Certificate Server Hierarchy Configuration tool is used with Microsoft Certificate Server version 1.0. This tool is used during subordinate CA Setup.