Export (0) Print
Expand All

ICertificateEnrollmentServerSetup::ErrorString property

The ErrorString property retrieves a string that contains additional information about Certificate Enrollment Web Service (CES) setup failure.

This property is read-only.

Syntax


HRESULT get_ErrorString(
  [out]  BSTR *pVal
);

Property value

A pointer to a BSTR variable that contains error information. This can be one of the following strings:

"The account should be a domain account. Local account is not allowed."

"Fail to retrieve the DNS name of the computer."

"The account is not a member of the local machine's IIS_IUSRS group."

"Setup is unable to check the membership of the account."

"Setup is unable to obtain security information for the account."

"The account name is incorrectly formatted. Examples of correct account names include domain\\account or account@domain."

"You have to be the local machine administrator in order to run this setup."

"Failed to create the directory %1."

"The setup object has already been initialized. This object cannot be initialized more than once."

"The setup object has not been initialized. Please initialize the setup object with the InitializeInstallDefaults method."

"You must be a member of the Enterprise Admins group to run Setup."

"The Certificate Enrollment Web Service or Certificate Enrollment Policy Web Service cannot be installed on a computer that is not a member of a domain."

"You cannot set this property because the application pool ""%1"" already exists."

"The Certificate Enrollment Web Service cannot be used with a standalone certification authority (CA). It can only be used with an enterprise CA."

"The Certificate Enrollment Web Service cannot be used with this certification authority (CA). It can only be used with an enterprise CA installed on Windows Server 2003 or later."

"The Certificate Enrollment Web Service is not configured with a certification authority (CA) name. Confirm that an enterprise CA is available and configure the Certificate Enrollment Web Service with the CA name." "The object has been initialized. You cannot call UnInstall on an initialized object. "

"Setup was unable to add Certificate Enrollment Web Service information to the Certification Authority object in Active Directory Domain Services (AD DS). To complete Setup, add the information manually using the command: %1."

"The Certificate Enrollment Web Service Setup failed because the CA ""%1"" cannot be contacted. Check the name, and confirm that the CA is properly configured and available."

"Setup could not add this role service because it already exists in the default website. Please remove the existing role service or select a different certification authority (CA) or authentication type."

"Setup was unable to delete Certificate Enrollment Web Service information from the Certification Authority object in Active Directory Domain Services (AD DS). To complete Setup, delete the information manually using the command: %1."

"You can set the ENUM_CESSETUPPROP_USE_IISAPPPOOLIDENTITY property to FALSE only by calling the SetApplicationPoolCredentials method with a valid user name and password."

"The Certificate Enrollment Web Service or Certificate Enrollment Policy Web Service must be installed on a member server in an Active Directory forest in which the Windows Server 2008 R2 version of ADPrep /forestprep has been successfully run."

"The Certificate Enrollment Web Service cannot operate because it is configured with incompatible settings: It is in renewal-only mode, is installed on the same computer as the certification authority (CA), and is using the built-in ApplicationPoolIdentity. Remove the Certificate Enrollment Web Service and install it with different settings."

Error codes

If the function succeeds, the function returns S_OK.

If the function fails, it returns an HRESULT value that indicates the error. Possible values include, but are not limited to, those in the following table. For a list of common error codes, see Common HRESULT Values.

NameMeaning
E_POINTER

The pVal parameter cannot be NULL.

E_OUTOFMEMORY

Memory could not be allocated for the error string.

Remarks

Calling any method on the ICertificateEnrollmentServerSetup interface resets this property value to an empty error string.

Requirements

Minimum supported client

Windows 7 [desktop apps only]

Minimum supported server

Windows Server 2008 R2 [desktop apps only]

Header

Casetup.h

IDL

Casetup.idl

DLL

Certocm.dll

IID

IID_ICertificateEnrollmentServerSetup is defined as 70027FDB-9DD9-4921-8944-B35CB31BD2EC

See also

ICertificateEnrollmentServerSetup

 

 

Community Additions

ADD
Show:
© 2014 Microsoft