Unable to access calendar, because the calendar server is not running.

Hello everyone.
I'm new in posts (not in read them) and I need some help.
This subject message appears when I try to access my iCal on Wiki Page.
We have here 2 Intel xServers, one with Web and features and other with Gateway and network management.
My Web Service, has Wiki, Blog, Calendar enable services, all up and running normally without errors, but the iCal I can't access showing that error on page.
I Installed the Mac OS Server Snow Leopard from the begin (formatting...), configured all things and ok.
But since starts the calendar was with that error.
The server is updated to 10.6.6.
I will really appreciate to be helped. Thanks from now!
Here is an iCal Log:
45:13-0200 [-] [caldav-8015] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up root resource: <class 'calendarserver.provision.root.RootResource'>
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up time zone service resource: <class 'twistedcaldav.static.TimezoneServiceFile'>
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up WebCalendar resource: /usr/share/collaboration
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up WebAdmin resource
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up Timezone Cache
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Configuring authentication wrapper
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up service
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Logging via AF_UNIX: /var/run/caldavd.sock
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Configuring log observer: <twistedcaldav.accesslog.AMPCommonAccessLoggingObserver object at 0x1021b0b50>
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Adding SSL server at 127.0.0.1:8450
2011-01-14 10:45:13-0200 [-] [caldav-8016] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Redirecting HTTP port 127.0.0.1:8016 to HTTPS port 127.0.0.1:8443
2011-01-14 10:45:13-0200 [-] [caldav-8016] [-] twext.web2.channel.http.HTTP503LoggingFactory starting on 8451
2011-01-14 10:45:13-0200 [-] [caldav-8016] [-] twisted.web2.channel.http.HTTPFactory starting on 8016
2011-01-14 10:45:13-0200 [-] [caldav-8016] [-] set uid/gid 93/93
2011-01-14 10:45:13-0200 [twistedcaldav.accesslog.AMPLoggingFactory] AMPLoggingProtocol connection established (HOST:UNIXSocket('/var/run/caldavd.sock') PEER:UNIXSocket(''))
2011-01-14 10:45:13-0200 [-] [caldav-8016] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('/var/run/caldavd.sock'))
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Configuring SudoDirectoryService with file: /etc/caldavd/sudoers.plist
2011-01-14 10:45:13-0200 [-] [caldav-8009] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Redirecting HTTP port 127.0.0.1:8009 to HTTPS port 127.0.0.1:8443
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Configuring authentication for realm: /Search
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up scheme: wiki
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up scheme: digest
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up document root at: /Users/dincaoadm/Desktop/test
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up principal collection: <class 'twistedcaldav.directory.principal.DirectoryPrincipalProvisioningResource'>
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up calendar collection: <class 'twistedcaldav.static.CalendarHomeProvisioningFile'>
2011-01-14 10:45:13-0200 [-] [caldav-8009] [-] twext.web2.channel.http.HTTP503LoggingFactory starting on 8444
2011-01-14 10:45:13-0200 [-] [caldav-8009] [-] twisted.web2.channel.http.HTTPFactory starting on 8009
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up root resource: <class 'calendarserver.provision.root.RootResource'>
2011-01-14 10:45:13-0200 [-] [caldav-8009] [-] set uid/gid 93/93
2011-01-14 10:45:13-0200 [-] [caldav-8009] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('/var/run/caldavd.sock'))
2011-01-14 10:45:13-0200 [twistedcaldav.accesslog.AMPLoggingFactory] AMPLoggingProtocol connection established (HOST:UNIXSocket('/var/run/caldavd.sock') PEER:UNIXSocket(''))
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up time zone service resource: <class 'twistedcaldav.static.TimezoneServiceFile'>
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up WebCalendar resource: /usr/share/collaboration
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up WebAdmin resource
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up Timezone Cache
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Configuring authentication wrapper
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Setting up service
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Logging via AF_UNIX: /var/run/caldavd.sock
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Configuring log observer: <twistedcaldav.accesslog.AMPCommonAccessLoggingObserver object at 0x1021b0b50>
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Adding SSL server at 127.0.0.1:8447
2011-01-14 10:45:13-0200 [-] [caldav-8013] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Redirecting HTTP port 127.0.0.1:8013 to HTTPS port 127.0.0.1:8443
2011-01-14 10:45:13-0200 [-] [caldav-8013] [-] twext.web2.channel.http.HTTP503LoggingFactory starting on 8448
2011-01-14 10:45:13-0200 [-] [caldav-8013] [-] twisted.web2.channel.http.HTTPFactory starting on 8013
2011-01-14 10:45:13-0200 [-] [caldav-8013] [-] set uid/gid 93/93
2011-01-14 10:45:13-0200 [twistedcaldav.accesslog.AMPLoggingFactory] AMPLoggingProtocol connection established (HOST:UNIXSocket('/var/run/caldavd.sock') PEER:UNIXSocket(''))
2011-01-14 10:45:13-0200 [-] [caldav-8013] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('/var/run/caldavd.sock'))
2011-01-14 10:45:13-0200 [-] [caldav-8010] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Redirecting HTTP port 127.0.0.1:8010 to HTTPS port 127.0.0.1:8443
2011-01-14 10:45:13-0200 [-] [caldav-8010] [-] twext.web2.channel.http.HTTP503LoggingFactory starting on 8445
2011-01-14 10:45:13-0200 [-] [caldav-8010] [-] twisted.web2.channel.http.HTTPFactory starting on 8010
2011-01-14 10:45:13-0200 [-] [caldav-8010] [-] set uid/gid 93/93
2011-01-14 10:45:13-0200 [twistedcaldav.accesslog.AMPLoggingFactory] AMPLoggingProtocol connection established (HOST:UNIXSocket('/var/run/caldavd.sock') PEER:UNIXSocket(''))
2011-01-14 10:45:13-0200 [-] [caldav-8010] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('/var/run/caldavd.sock'))
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Redirecting HTTP port 127.0.0.1:8015 to HTTPS port 127.0.0.1:8443
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] twext.web2.channel.http.HTTP503LoggingFactory starting on 8450
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] twisted.web2.channel.http.HTTPFactory starting on 8015
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] set uid/gid 93/93
2011-01-14 10:45:13-0200 [twistedcaldav.accesslog.AMPLoggingFactory] AMPLoggingProtocol connection established (HOST:UNIXSocket('/var/run/caldavd.sock') PEER:UNIXSocket(''))
2011-01-14 10:45:13-0200 [-] [caldav-8015] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('/var/run/caldavd.sock'))
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Redirecting HTTP port 127.0.0.1:8012 to HTTPS port 127.0.0.1:8443
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] twext.web2.channel.http.HTTP503LoggingFactory starting on 8447
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] twisted.web2.channel.http.HTTPFactory starting on 8012
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] set uid/gid 93/93
2011-01-14 10:45:13-0200 [twistedcaldav.accesslog.AMPLoggingFactory] AMPLoggingProtocol connection established (HOST:UNIXSocket('/var/run/caldavd.sock') PEER:UNIXSocket(''))
2011-01-14 10:45:13-0200 [-] [caldav-8012] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('/var/run/caldavd.sock'))
2011-01-14 10:45:13-0200 [-] [caldav-8014] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Redirecting HTTP port 127.0.0.1:8014 to HTTPS port 127.0.0.1:8443
2011-01-14 10:45:13-0200 [-] [caldav-8014] [-] twext.web2.channel.http.HTTP503LoggingFactory starting on 8449
2011-01-14 10:45:13-0200 [-] [caldav-8014] [-] twisted.web2.channel.http.HTTPFactory starting on 8014
2011-01-14 10:45:13-0200 [-] [caldav-8014] [-] set uid/gid 93/93
2011-01-14 10:45:13-0200 [twistedcaldav.accesslog.AMPLoggingFactory] AMPLoggingProtocol connection established (HOST:UNIXSocket('/var/run/caldavd.sock') PEER:UNIXSocket(''))
2011-01-14 10:45:13-0200 [-] [caldav-8014] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('/var/run/caldavd.sock'))
2011-01-14 10:45:13-0200 [-] [caldav-8011] [-] [calendarserver.tap.caldav.CalDAVServiceMaker#info] Redirecting HTTP port 127.0.0.1:8011 to HTTPS port 127.0.0.1:8443
2011-01-14 10:45:13-0200 [-] [caldav-8011] [-] twext.web2.channel.http.HTTP503LoggingFactory starting on 8446
2011-01-14 10:45:13-0200 [-] [caldav-8011] [-] twisted.web2.channel.http.HTTPFactory starting on 8011
2011-01-14 10:45:13-0200 [-] [caldav-8011] [-] set uid/gid 93/93
2011-01-14 10:45:13-0200 [twistedcaldav.accesslog.AMPLoggingFactory] AMPLoggingProtocol connection established (HOST:UNIXSocket('/var/run/caldavd.sock') PEER:UNIXSocket(''))
2011-01-14 10:45:13-0200 [-] [caldav-8011] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('/var/run/caldavd.sock'))

Hi,
Note this is a 10.5 forum and so 10.6 problems may not correspond.
However, I noted the following log entry:
http://calendarserver.tap.caldav.CalDAVServiceMaker#info Setting up document root at: /Users/dincaoadm/Desktop/test
For collaboration service with wikis, the document root should be located at /Library/CalendarServer/Documents
Which leads me to suspect your iCalServer is not setup correctly for wiki/calendar service.
Before selecting calendar service in the web setup ensure the iCalServer service is running correctly.
HTH,
Harry

Similar Messages

Certificate issues Active Directory Certificate Services could not process request 3699 due to an error: The revocation function was unable to check revocation because the revocation server was offline. 0x80092013

Hi,
We have some problems with our Root CA. I can se a lot of failed requests. with the event id 22: in the logs. The description is: Active Directory Certificate Services could not process request 3686 due to an error: The revocation function was unable to
check revocation because the revocation server was offline. 0x80092013 (-2146885613). The request was for CN=xxxxx.ourdomain.com. Additional information: Error Verifying Request Signature or Signing Certificate
A couple of months ago we decomissioned one of our old 2003 DCs and it looks like this server might have had something to do with the CA structure but I am not sure whether this was in use or not since I could find the role but I wasn't able to see any existing
configuration.
Let's say that this server was previously responsible for the certificates and was the server that should have revoked the old certs, what can I do know to try and correct the problem?
Thank you for your help
//Cris

hello,
let me recap first:
you see these errors on a ROOT CA. so it seems like the ROOT CA is also operating as an ISSUING CA. Some clients try to issue a new certificate from the ROOT CA and this fails with your error mentioned.
do you say that you had a PREVIOUS CA which you decomissioned, and you now have a brand NEW CA, that was built as a clean install? When you decommissioned the PREVIOUS CA, that was your design decision to don't bother with the current certificates that it
issued and which are still valid, right?
The error says, that the REQUEST signature cannot be validated. REQUESTs are signed either by itself (self-signed) or if they are renewal requests, they would be signed with the previous certificate which the client tries to renew. The self-signed REQUESTs
do not contain CRL paths at all.
So this implies to me as these requests that are failing are renewal requests. Renewal requests would contain CRL paths of the previous certificates that are nearing their expiration.
As there are many such REQUEST and failures, it probably means that the clients use AUTOENROLLMENT, which tries to renew their current, but shortly expiring, certificates during (by default) their last 6 weeks of lifetime.
As you decommissioned your PREVIOUS CA, it does not issue CRL anymore and the current certificates cannot be checked for validity.
Thus, if the renewal tries to renew them by using the NEW CA, your NEW CA cannot validate CRL of the PREVIOUS CA and will not issue new certificates.
But it would not issue new certificates anyway even if it was able to verify the PREVIOUS CA's CRL, as it seems your NEW CA is completely brand new, without being restored from the PREVIOUS CA's database. Right?
So simply don't bother :-) As long as it was your design to decommission the PREVIOUS CA without bothering with its already issued certificates.
The current certificates which autoenrollment tries to renew cannot be checked for validity. They will also slowly expire over the next 6 weeks or so. After that, autoenrollment will ask your NEW CA to issue a brand new certificate without trying to renew.
Just a clean self-signed REQUEST.
That will succeed.
You can also verify this by trying to issue a certificate on an affected machine manually from Certificates MMC.
ondrej.

Subordinate certification authority can't start ADCS service: The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).

Hi
I have 1 rootCA and 1 subordinate CA. I removed one of the locations to publish CRL and after that the ADCS service can't start. I get the warning first:
Revocation status for a certificate in the chain for CA certificate 2 for siu-SRVDC01-CA could not be verified because a server is currently unavailable. The revocation function was unable to check revocation because the revocation server was offline.
0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).
And then the error:
Active Directory Certificate Services did not start: Could not load or verify the current CA certificate. siu-SRVDC01-CA The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).
I've read many threads with similar problems but I can't find the solution. The CDP is online. I've run "certutil -url cert.cer" to verify the CDP and AIA and everything is fine. But the service is still not starting.
See this command too:
C:\>certutil -verify -urlfetch subCADC01.cer
Issuer:
CN=siu-SRVDC02-CA
DC=siu
DC=domain
Name Hash(sha1): 152a7c43f186d9179c1c3256d3a1a0af4a9df892
Name Hash(md5): b409e417a38bbe04b5800512bd94efac
Subject:
CN=siu-SRVDC01-CA
DC=siu
DC=domain
Name Hash(sha1): 5ee421b84c3b18ff134cf2e42226853d78d3409b
Name Hash(md5): e1a454692361733e45dad374dc14cae3
Cert Serial Number: 1e0000022c707c76c0a27b315700000000022c
dwFlags = CA_VERIFY_FLAGS_CONSOLE_TRACE (0x20000000)
dwFlags = CA_VERIFY_FLAGS_DUMP_CHAIN (0x40000000)
ChainFlags = CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT (0x40000000)
HCCE_LOCAL_MACHINE
CERT_CHAIN_POLICY_BASE
-------- CERT_CHAIN_CONTEXT --------
ChainContext.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
ChainContext.dwRevocationFreshnessTime: 1 Hours, 2 Minutes, 16 Seconds
SimpleChain.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
SimpleChain.dwRevocationFreshnessTime: 1 Hours, 2 Minutes, 16 Seconds
CertContext[0][0]: dwInfoStatus=102 dwErrorStatus=0
Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
NotBefore: 19.03.2015 11:18
NotAfter: 19.03.2017 11:28
Subject: CN=siu-SRVDC01-CA, DC=siu, DC=domain
Serial: 1e0000022c707c76c0a27b315700000000022c
Template: SubCA
a1a8a95464c5b586da6e9b304142d59fc5a22ae0
Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
---------------- Certificate AIA ----------------
Verified "Certificate (0)" Time: 0
[0.0] http://wwwca/CertEnroll/srvdc02.siu.domain_siu-SRVDC02-CA.crt
---------------- Certificate CDP ----------------
Verified "Base CRL (26)" Time: 0
[0.0] http://sharepoint.siu.no:8088/siu-SRVDC02-CA.crl
---------------- Base CRL CDP ----------------
No URLs "None" Time: 0
---------------- Certificate OCSP ----------------
No URLs "None" Time: 0
CRL 26:
Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
ThisUpdate: 19.03.2015 11:10
NextUpdate: 15.09.2015 23:30
e2ee543a68214f9b99dda2e9f58b1ddfc34429d1
CertContext[0][1]: dwInfoStatus=10c dwErrorStatus=0
Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
NotBefore: 23.09.2011 13:00
NotAfter: 23.09.2021 13:10
Subject: CN=siu-SRVDC02-CA, DC=siu, DC=domain
Serial: 60fc459ebdefa5b646a081b0c21c259d
4ea8bb95b0038c69a83c939e8a54f892cd0b5056
Element.dwInfoStatus = CERT_TRUST_HAS_NAME_MATCH_ISSUER (0x4)
Element.dwInfoStatus = CERT_TRUST_IS_SELF_SIGNED (0x8)
Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
---------------- Certificate AIA ----------------
No URLs "None" Time: 0
---------------- Certificate CDP ----------------
No URLs "None" Time: 0
---------------- Certificate OCSP ----------------
No URLs "None" Time: 0
Exclude leaf cert:
691f7e42f5c4a86d03b7225bf7303369ef6dcc7e
Full chain:
17e5b9477a1736c33dc0ff245e7b06de5b958c4c
Verified Issuance Policies: None
Verified Application Policies: All
Cert is a CA certificate
Leaf certificate revocation check passed
CertUtil: -verify command completed successfully.
Any clue?

It looks like it is trying to get the CRL using LDAP. It is quite strange since no ldap entry is on the subordinate CA,
only an HTTP address:
<CertificateRevocationList location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?certificateRevocationList?base?objectClass=cRLDistributionPoint"
fileRef="DEEB557897A9FEA217DF83D95BF24CA54051B1CF.crl" issuerName="siu-SRVDC02-CA" />
<CertificateRevocationList deltaCRL="true" location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?deltaRevocationList?base?objectClass=cRLDistributionPoint"
I have checked that object using adsi Edit and the permissions seem ok. Also there is a value on both attributes: certificateRevocationList and deltaRevocationList.
This problem happened after I removed the LDAP entry for the "CRL Distribution point" from the sub CA properties. Should I add back the LDAP entry?
Log Name: Microsoft-Windows-CAPI2/Operational
Source: Microsoft-Windows-CAPI2
Date: 19.03.2015 14:42:07
Event ID: 11
Task Category: Build Chain
Level: Error
Keywords: Path Discovery,Path Validation
User: SYSTEM
Computer: srvdc01.siu.domain
Description:
For more details for this event, please refer to the "Details" section
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" />
<EventID>11</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>11</Task>
<Opcode>2</Opcode>
<Keywords>0x4000000000000003</Keywords>
<TimeCreated SystemTime="2015-03-19T13:42:07.481533500Z" />
<EventRecordID>131</EventRecordID>
<Correlation />
<Execution ProcessID="6288" ThreadID="5472" />
<Channel>Microsoft-Windows-CAPI2/Operational</Channel>
<Computer>srvdc01.siu.domain</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<CertGetCertificateChain>
<Certificate fileRef="E02AA2C59FD54241309B6EDA86B5C56454A9A8A1.cer" subjectName="siu-SRVDC01-CA" />
<ExtendedKeyUsage />
<Flags value="40000000" CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT="true" />
<ChainEngineInfo context="machine" />
<CertificateChain chainRef="{60B61582-1C3C-4B58-AE8C-70278ADEE402}" revocationFreshnessTime="P2DT21H13M20S">
<TrustStatus>
<ErrorStatus value="1000040" CERT_TRUST_REVOCATION_STATUS_UNKNOWN="true" CERT_TRUST_IS_OFFLINE_REVOCATION="true" />
<InfoStatus value="100" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
</TrustStatus>
<ChainElement>
<Certificate fileRef="E02AA2C59FD54241309B6EDA86B5C56454A9A8A1.cer" subjectName="siu-SRVDC01-CA" />
<SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" />
<PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" />
<TrustStatus>
<ErrorStatus value="1000040" CERT_TRUST_REVOCATION_STATUS_UNKNOWN="true" CERT_TRUST_IS_OFFLINE_REVOCATION="true" />
<InfoStatus value="102" CERT_TRUST_HAS_KEY_MATCH_ISSUER="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
</TrustStatus>
<ApplicationUsage any="true" />
<IssuanceUsage />
<RevocationInfo freshnessTime="P2DT21H13M20S">
<RevocationResult value="80092013">The revocation function was unable to check revocation because the revocation server was offline.</RevocationResult>
<StrongSignProperties signHash="RSA/SHA1" issuerPublicKeyLength="2048" />
<DeltaStrongSignProperties signHash="RSA/SHA1" issuerPublicKeyLength="2048" />
<CertificateRevocationList location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?certificateRevocationList?base?objectClass=cRLDistributionPoint"
fileRef="DEEB557897A9FEA217DF83D95BF24CA54051B1CF.crl" issuerName="siu-SRVDC02-CA" />
<CertificateRevocationList deltaCRL="true" location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?deltaRevocationList?base?objectClass=cRLDistributionPoint"
fileRef="58A2CDBC7A238DDD76EEFEDE354A04596F5AED71.crl" issuerName="siu-SRVDC02-CA" />
</RevocationInfo>
</ChainElement>
<ChainElement>
<Certificate fileRef="56500BCD92F8548A9E933CA8698C03B095BBA84E.cer" subjectName="siu-SRVDC02-CA" />
<SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" />
<PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" />
<TrustStatus>
<ErrorStatus value="0" />
<InfoStatus value="10C" CERT_TRUST_HAS_NAME_MATCH_ISSUER="true" CERT_TRUST_IS_SELF_SIGNED="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
</TrustStatus>
<ApplicationUsage any="true" />
<IssuanceUsage any="true" />
</ChainElement>
</CertificateChain>
<EventAuxInfo ProcessName="certsrv.exe" />
<CorrelationAuxInfo TaskId="{54E4FCD3-E70A-4024-BB81-6A053EAACE21}" SeqNumber="9" />
<Result value="80092013">The revocation function was unable to check revocation because the revocation server was offline.</Result>
</CertGetCertificateChain>
</UserData>
</Event>

Why do I see 'Unable to check revocation because the revocation server was offline'?

Hi,
In a lab we've been renewing our Subordinate Issuing CA cert fine for 3 iterations. On the 4th renewal attempt, when I try to perform a 'Certutil -InstallCet Cert(4).crt, I receive the message 'The revocation function was unable to check revocation
because the revocation server was offline. 0x80092013'.
Why could I perform a renewal operation successfully up to this point but cant now? What does this message really mean cause no servers are offline?
Thanks for your help! SdeDot

Thanks Paul.
The first error I found in the registry was the DSConfigDN was incorrect due to me copying the commands from another test system.
We didn't specifically code a CDP or AIA on the Root cause each time we renewed the Cert on the Root, on the Sub CA we published the renewed Cert to AD and added the renewed Cert and renewed CRL to the local Root store.
What follows is the RootCA registry.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration\FlyByNightRootCA:
Keys:
CSP
EncryptionCSP
ExitModules
PolicyModules
Values:
ViewAgeMinutes           REG_DWORD = 10 (16)
ViewIdleMinutes          REG_DWORD = 8
CAType                   REG_DWORD = 3
    ENUM_STANDALONE_ROOTCA -- 3
UseDS                    REG_DWORD = 0
ForceTeletex             REG_DWORD = 12 (18)
    ENUM_TELETEX_AUTO -- 2
    ENUM_TELETEX_UTF8 -- 10 (16)
SignedAttributes         REG_MULTI_SZ =
    0: RequesterName
EKUOIDsForPublishExpiredCertInCRL REG_MULTI_SZ =
    0: 1.3.6.1.5.5.7.3.3 Code Signing
    1: 1.3.6.1.4.1.311.61.1.1 Kernel Mode Code Signing
CommonName               REG_SZ = FlyByNightRootCA
Enabled                  REG_DWORD = 1
PolicyFlags              REG_DWORD = 0
CertEnrollCompatible     REG_DWORD = 0
CRLEditFlags             REG_DWORD = 100 (256)
    EDITF_ENABLEAKIKEYID -- 100 (256)
CRLFlags                 REG_DWORD = 2
    CRLF_DELETE_EXPIRED_CRLS -- 2
InterfaceFlags           REG_DWORD = 41 (65)
    IF_LOCKICERTREQUEST -- 1
    IF_NOREMOTEICERTADMINBACKUP -- 40 (64)
EnforceX500NameLengths   REG_DWORD = 1
SubjectTemplate          REG_MULTI_SZ =
    0: EMail
    1: CommonName
    2: OrganizationalUnit
    3: Organization
    4: Locality
    5: State
    6: DomainComponent
    7: Country
ClockSkewMinutes         REG_DWORD = a (10)
LogLevel                 REG_DWORD = 3
HighSerial               REG_DWORD = 0
CAServerName             REG_SZ = Server03
ValidityPeriod           REG_SZ = Hours
ValidityPeriodUnits      REG_DWORD = c (12)
CAXchgCertHash           REG_MULTI_SZ =
KRACertHash              REG_MULTI_SZ =
KRACertCount             REG_DWORD = 0
KRAFlags                 REG_DWORD = 0
CRLPublicationURLs       REG_MULTI_SZ =
    0: 65:C:\Windows\system32\CertSrv\CertEnroll\%3%8%9.crl
    CSURL_SERVERPUBLISH -- 1
    CSURL_SERVERPUBLISHDELTA -- 40 (64)
    1: 8:ldap:///CN=%7%8,CN=%2,CN=CDP,CN=Public Key Services,CN=Services,%6%10
    CSURL_ADDTOCRLCDP -- 8
    2: 0:http://%1/CertEnroll/%3%8%9.crl
    3: 6:file://%1/CertEnroll/%3%8%9.crl
    CSURL_ADDTOCERTCDP -- 2
    CSURL_ADDTOFRESHESTCRL -- 4
CRLPeriod                REG_SZ = Hours
CRLPeriodUnits           REG_DWORD = c (12)
CRLOverlapPeriod         REG_SZ = Hours
CRLOverlapUnits          REG_DWORD = 0
CRLDeltaPeriod           REG_SZ = Hours
CRLDeltaPeriodUnits      REG_DWORD = 0
CRLDeltaOverlapPeriod    REG_SZ = Minutes
CRLDeltaOverlapUnits     REG_DWORD = 0
CAXchgValidityPeriod     REG_SZ = Weeks
CAXchgValidityPeriodUnits REG_DWORD = 1
CAXchgOverlapPeriod      REG_SZ = Days
CAXchgOverlapPeriodUnits REG_DWORD = 1
MaxIncomingMessageSize   REG_DWORD = 10000 (65536)
MaxIncomingAllocSize     REG_DWORD = 10000 (65536)
CACertPublicationURLs    REG_MULTI_SZ =
    0: 1:C:\Windows\system32\CertSrv\CertEnroll\%1_%3%4.crt
    CSURL_SERVERPUBLISH -- 1
    1: 0:ldap:///CN=%7,CN=AIA,CN=Public Key Services,CN=Services,%6%11
    2: 0:http://%1/CertEnroll/%1_%3%4.crt
    3: 2:file://%1/CertEnroll/%1_%3%4.crt
    CSURL_ADDTOCERTCDP -- 2
CACertHash               REG_MULTI_SZ =
    0: e0 bb 32 b9 bf f7 43 1d 23 e2 da b6 26 10 33 d8 00 61 e6 14
    1: a8 77 c8 09 af f0 07 4c 70 51 78 80 09 26 b1 05 f5 16 e5 be
Security                 REG_BINARY =
    Allow CA Administrator BUILTIN\Administrators
    Allow Certificate Manager BUILTIN\Administrators
    Allow Enroll Everyone
SetupStatus              REG_DWORD = 1
    SETUP_SERVER_FLAG -- 1
DSConfigDN               REG_SZ = CN=Configuration,DC=TestPKI,DC=Net
AuditFilter              REG_DWORD = 7f (127)
CRLNextPublish           REG_BINARY = 2/28/2015 4:22 AM
CertUtil: -getreg command completed successfully.
Thanks for your help! SdeDot

HT1937 my iphone could not be activated because the activation server could not be rached. how can i solve this problem?

my iphone could not be activated because the activation server could not be rached. how can i solve this problem?

Make sure the wifi you're connecting to has a strong connection. Also, it has to be set up with basic security, meaning you can't activate your phone using wifi that needs you to access Safari to sign in.
You can also always use iTunes on your computer (with a strong Internet connection) to do this as well.

My screen says VPN connection you were disconnected because the ppp server is not responding try reconnecting. When I hit "O.K." IPad shuts down. Any suggestions, please?

My screen says VPN connection you were disconnected because the PPP server is not responding. Try reconnecting. When I touch "O.K." screen goes dark after a couple of seconds. Any ideas to solve this, please?

I have no solution. I am using Lion on Mac Air connecting to 3g using a Huawei 156 dongle modem and i keep getting cut off with this message
You were disconnected because the PPP server is not responding.
I need a solution too

HT4623 i m using iphone 3gs & i m updating the OS from 4.1 to 6.1 ,,it is showing the message that ur iphone cannot be activated because the activation server is not temporarily unavailable

i m using iphone 3gs & i m updating the OS from 4.1 to 6.1 ,,it is showing the message that ur iphone cannot be activated because the activation server is not temporarily unavailable

Contact your Carrier...
Also see this discussion.
https://discussions.apple.com/message/21189708

"Your iPhone could not be activated because the activation server could not be reached"

It won't let me set up my phone due to the wifi- it keeps coming up with "Your iPhone could not be activated because the activation server could not be reached". The wifi is definitely working- I'm using it now! However, after you have entered the password for this wifi you do have to enter details into a portal but this hasn't popped up so I can't do it. This is the wifi I have, any ideas? Thank you in advance

3 possible causes for this message:
1] activation server is actually down. Extremely rare occurrence and of very short duration
if it happens.
2] iPhone is jailbroken or hacked.
3] computer the iPhone is hooked to has been used to jailbreak or hack iOS devices.
For 1], try again. Try different wifi at friend's, school, public place like Starbucks or McDonalds.
For 2] & 3], you are on your own. Google may provide some insight. Terms of Use for this
forum prohibit discussion of hacked and jailbroken devices.

Iam using iphone 5s frequently problem is "your i phone couls not be activated because the activation server can not be reached. connect to wifi or i tunes to activate.

iam using iphone 5s frequently problem is "your i phone couls not be activated because the activation server can not be reached. connect to wifi or i tunes to activate.

Hi HT201407,
Welcome to the Apple Support Communities!
I know it can be frustrating when your iPhone does not activate the way you would expect. In this situation there are some great troubleshooting steps I would recommend. Please use the attached article as a troubleshooting reference.
Get help activating your iPhone - Apple Support
Cheers,
Joe

IPhone 3GS will not sync calendars because the sync server failed. Just installed Outlook 2010. Is there a fix for this?

My iPhone 3GS could not sync calendars to the iPhone because the sync server failed to sync the iPhone. Just installed Outlook 2010. Is there a fix for this?

I am simply lookig for some help not an argument. I am not an RF specialist however have setup a few wireless networks in my tenure at Wynn Resorts. I fully agree that wireless networking is an art and a science however the powers that be in Network Land have toughted wireless networking is the easiest and quickest way to get two computers to talk with one another. As I previously said I have already turned one (1) MBP in for this problem and Apple decided to replace it because they could not fix the problem with my particular MBP. This MBP was running Leopard when the problems started
I am having a hard time believeing that there are several other devicces in my home that depend on a wireless network to operate and my MBP is the only one having an issue. I took this a step further and decided to see what would happen if I tried to connect wirelessly via Fusion. In Windows 7 I am able to print and scan to my hearts content without any issues. I am able to browse the internet as much as I want. I close Fusion and try to connect to my printer via wireless and nothing.
In order to get Apple to help do I need to get a Network Analyzer and capture packets when I have these problems? Out of the 1000 + posts is there a consolidation of which answer is the best? BTW I am accessing the internet via a wireless connection using Fusion and Windows 7.
In response to Linc's comments, I will look at the router specifications however I did not qualify that these devices are not using the wireless connection at the same time. Right now I would guess there are maybe two (2) or three (3) at the most that are actively transmitting / receiving information. -- Thanks

We have a ipod and iphone 4 when we try to do software updates this message comes up'cannot be updated at this time because the software server could not be contacted or tenporarilly unavailable .' we have tried over 3-4 weeks but still come up the same

we are getting a message ,'the ipod cannot be updated at this time because the ipod software update server could not be contacted or is temporarilly unavailable ' . we have been trying for 3-4 weeks now same same ?

Try turning off the Firewall.
System Preferences / Security - Firewall.
or System Preferences / Sharing - Firewall.

Itunes could not sync calendar because the sync server failed to sync: Help

Can anyone please help me with this error. Trying to sync to outlook 07, contacts sync, but not calendar. do not want to lose the information on the phone in the sync resolution.. any ideas?

I found in a different post the suggestion to do a factory reset on the iPod from within iTunes (on the Summary tab).
Worked for me, but it took a while to reset and then reload all of the info...

HT4623 I have an apple 3GS phone .I connected to iTunes while updating from 4.1 version, after the updation has been completed it's coming unable to activate iPhone because. the activation server is temporarily unavailable.I connected to iTunes but its no

My iPhone cannot be activated can u tell me the reason.

Has the device ever been hacked or jailbroken?

HT1245 it is failing to sync contact because the sync server is not available. What does that mean??

I am not avble to sync my Iphone. I just got a new iphone and am trying to sync my old one so can activate the new 4s. There is a warning message that says sync failed because server not available.

Try:
iPhone, iPad, iPod touch: How to restart the Apple Mobile Device Service (AMDS) on Windows

HT4623 I'm upgrading to ios 7, and I'm getting a message saying "Your iPhone could not be activated because the activation server could not be reached" I've gotten this now 10 times and have even tried activating it through iTunes which also did not work.

I am trying to upgrade my phone to iOS 7, I restored it so it would download the new software and now it is telling me that it cannot be activated. How do I get around this?

unfortunately no, a million people are attempting to update their phones right now, and thus activate them. Patience will have to suffice.
For the future, I would recommend not updating essential work devices on the launch day

Unable to access calendar, because the calendar server is not running.

Similar Messages

Maybe you are looking for