JSI Tip 6903. Your Windows 2000 SP4 server event log records 'Certificate Services did not start', but it did start, and runs normally?

Your Application event log contains:

Event Type: Information Event Source: CertSvc Event Category: None Event ID: 42 Date: dateTime: timeUser: N/A Computer: ServernameDescription: Certificate Services did not start: Could not build CA certificate chain xxxx.             A certificate chain processed correctly, but terminated in a root certificate             which is not trusted by the trust provider. 0x800b0109 (-2146762487). Event Type: Information Event Source: CertSvc Event Category: None Event ID: 58 Date: dateTime: timeUser: N/A Computer: ServernameDescription: Certificate Services did not start: A certificate in the CA certificate chain            for xxxx has expired. A required certificate is not within its validity period            when verifying against the current system clock or the timestamp in the signed            file. 0x800b0101 (-2146762495). Event Type: Warning Event Source: CertSvc Event Category: None Event ID: 51 Date: dateTime: timeUser: N/A Computer: ServernameDescription: Certificate Services did not start: A certificate in the CA certificate chain              for xxxx has been revoked. 0x800B010C (-2146762484). Event Type: Information Event Source: CertSvc Event Category: None Event ID: 26 Date: dateTime: timeUser: N/A Computer: ServernameDescription: Certificate Services for xxxx was started.

Starting with SP4, events are logged during the certification authority (CA) certificate chain-verification process when an invalid certificate is detected. This message DOES NOT indicate a problem with the current certificate.

Your only workaround is to ignore the Certificate Services did not start portion of the event description for events that are logged during the CA certificate chain-verification process.