No matter what your experience level is, when setting up a PKI you can run into many issues. They may be more common issues or issues you have never seen before, so understanding how to handle these types of errors is very important. Part of the PKI setup process is running multiple certutil commands from a command prompt. In our example today we will discuss the access denied error you may run into when running any of these commands.
Error Handling
This ldap: 0x32: LDAP_INSUFFICIENT_RIGHTS or the 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED) error are common errors you may run into when trying to run different certutil commands, even though you are on an Administrator command prompt. Luckily, the fix is as simple as checking the permissions on the account attempting to run this command. This error is likely coming from the issue of your logged in account not having the right permissions to run this command. As long as you switch to an account that has Enterprise Admin rights, and open a new Administrator command prompt, rerunning this command should clear up this issue.
Conclusion
As you can see, some of these fixes can be extremely simple. Other issues, however may cause more issue or require more in-depth fixes. At Encryption Consulting, we work with your organization to plan, implement, and troubleshoot any PKI setup you may want to do. To learn more about how we can help your organization, please reach out to [email protected] or www.encryptionconsulting.com.
