Error Message: The Certification Authority Service Has Not Been Started


When you request a certificate from a Web page through a Web proxy, you may receive the following error messages:

  • Your request failed. An error occurred while the server was processing your request.

    Contact your administrator for further assistance.
    Access is denied. 0x80070005 (WIN32: 5)
    COM Error Info:
    CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
    The operation completed successfully. 0x0 (0)
    Suggested Cause:
    The Certification Authority Service has not been started.


This problem can occur if the computer account for the server on which the Web Proxy service is hosted has not been authorized for delegation.


To resolve this problem, on a domain controller (DC) or workstation with the Active Directory administrative tools installed, enable the Web proxy's computer account for delegation:

  1. Log on as a domain administrator or equivalent account.
  2. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
  3. In the left pane, locate the container or organizational unit (OU) on which you want to enable delegation.
  4. Right-click the computer account name, and then click Properties.
  5. On the General tab, click Trust computer for delegation.
  6. Click OK.
  7. Quit Active Directory Users and Computers.


Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

More Information

For additional information about Kerberos and delegation, click the article number below to view the article in the Microsoft Knowledge Base:

283201 HOW TO: Use Delegation in Windows 2000 with COM+
266080 Answers to Frequently Asked Kerberos Questions