| Previous | Next |
| CERTSRV_E_ENCODING_LENGTH | CERTSRV_E_RESTRICTEDOFFICER |
CERTSRV_E_ROLECONFLICT
CERTSRV_E_ROLECONFLICT The CA denied the operation because role separation is enabled and the current identity holds more than one conflicting CA role.
What to check
- Determine which CA roles are assigned to the account, such as administrator, certificate manager, auditor, or backup operator.
- Use a separate, least-privileged account for the intended task rather than disabling role separation to bypass the restriction.
- Review CA security assignments and the audit trail for recent role or permission changes.
Microsoft: Role separation definition
Microsoft: Audit Certification Services
Looking for a different code? Search another status or error code.