| Previous | Next |
| CERTSRV_E_ROLECONFLICT | CERTSRV_E_KEY_ARCHIVAL_NOT_CONFIGURED |
CERTSRV_E_RESTRICTEDOFFICER
CERTSRV_E_RESTRICTEDOFFICER The request can be managed only by a certificate manager who is authorized for the current requester. The CA is enforcing a restricted certificate-manager workflow.
What to check
- Verify the requester identity recorded on the pending request and the restrictions assigned to the certificate manager.
- Have an authorized certificate manager process the request; do not broaden officer permissions just to handle a single request.
- Audit changes to certificate-manager restrictions because they directly affect who can approve enrollment.
Microsoft: Audit Certification Services
Microsoft: Role separation definition
Microsoft: Active Directory Certificate Services overview
Looking for a different code? Search another status or error code.