| Previous | Next |
| CERTSRV_E_RESTRICTEDOFFICER | CERTSRV_E_NO_VALID_KRA |
CERTSRV_E_KEY_ARCHIVAL_NOT_CONFIGURED
CERTSRV_E_KEY_ARCHIVAL_NOT_CONFIGURED The request or template requires private-key archival, but the Certification Authority has no valid key-archival configuration to accept archived keys.
What to check
- Confirm that a valid Key Recovery Agent certificate is configured on the issuing CA and that the archival certificate is still usable.
- Check that the template is intentionally configured to archive the subject’s encryption private key.
- Avoid turning on key archival casually: it must be paired with protected recovery-agent keys, access controls, and a documented recovery process.
Microsoft: Key Recovery Server
Microsoft: Audit Certification Services
Microsoft: Certificate template concepts
Looking for a different code? Search another status or error code.