Windows Security Log Event ID 4868

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
Category
 • Subcategory
Object Access
 • Certification Services
Type Success
Corresponding events
in Windows 2003
and before
 

4868: The certificate manager denied a pending certificate request

On this page

Certification Authorities and Certificate Templates can be configured to require approval by an administrator or certificate manager before the certificate is signed and issued by the CA.  In such cases the certificate request is accepted into the Pending Requests folder of the Certification Authority MMC snap-in.  The certificate manager can then Issue or Deny the request.  This event is logged when the manager denies the request.

To get the details on the request including who requested it you will need to look in the log for other events with the same Request ID.

This event event is only logged if "Issue and manage certificate requests" is enabled on the Audit tab of the CA's properties in Certificate Services MMC snap-in and of course if the Certificate Services audit subcategory is enabled with auditpol.

Free Security Log Resources by Randy

Supercharger Free Edition


Supercharger's built-in Xpath filters leave the noise behind.

Free.

 

Examples of 4868

The certificate manager denied a pending certificate request. 

Request ID: 6

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection

 

Upcoming Webinars
    Additional Resources