Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm getting the following error message a couple of computers: Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted. Enrollment will not be performed. Does anyone know how to resolve this aside from simply disabling auto-enroll? I've checked the computer settings and both are configured to use the correct (preferred) DNS.

share|improve this question
When do the messages appear? These should be expected when a system with autoenroll is logged in to while away from the domain. – Shane Madden Aug 16 '11 at 17:28
Any firewall behind that server and DC or Certificate Services Server? – NetVicious Apr 28 at 12:35

I am assuming that the computers are properly joined to the domain. I am also assuming that you WANT the machines to autoenroll for a machine certificate.

Have you verified that:

  1. Your certificate services server is online
  2. Your certificate template has the correct security setting and is made available for issue
  3. Your group policy properly set to autoenroll workstations
  4. The time on your workstation matches the time on the domain (this is important for Kerberos tickets)
share|improve this answer

According to Microsoft it Could be a DNS issue or Network issue Accoring to Microsoft says he following may help

Click Start, click Run, type gpedit.msc, and then press ENTER. In the left pane, expand Computer Configuration, expand Windows Settings, expand Security Settings, and then expand Public Key Policies. Double-click Autoenrollment Settings. Click Do not enroll certificates automatically. Click OK. Repeat steps 2 through 5, but in step 2, expand User Configuration, expand Windows Settings, expand Security Settings, and then expand Public Key Policies. Close the Group Policy window.

share|improve this answer
The link you posted results in a 'bad request.' – murphj Aug 18 '11 at 15:09
Thanks It's fixed now – tkrabec Aug 18 '11 at 15:23

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.