Event ID 86, CertificateServicesClient-CertEnroll [Fixed]

If the Event ID 86: CertificateServicesClient-CertEnroll keeps troubling you, then this post may be able to help you. When this error pops up, your device may shut down or freeze with a DPC_WATCHDOG_VIOLATION Blue Screen. A notification highlighting the log name, source, event ID, etc., will also appear with the error message. Fortunately, you can follow some simple steps to eliminate this error.

What causes Event ID 86?

The Event ID 86 often appears when the Active Directory Certificate Services cannot use the provider specified in the registry for encryption keys. It is usually related to the TPM, BIOS, or corrupted Windows Updates or Drivers.

Fix Event ID 86, CertificateServicesClient-CertEnroll

If the Event ID 86: CertificateServicesClient-CertEnroll error keeps troubling you on your Windows computer, follow these suggestions to resolve the issue:

1. Run or Roll back Windows Update/Upgrade
2. Update Device Drivers
3. Update BIOS/Firmware
4. Check Minidump files
5. System Restore to a point before the problem started
6. Repair Windows OS using Installation Media

Now let us see these in detail.

1] Run or Roll back Windows Update/Upgrade

First, update Windows manually and see if this helps. However, consider uninstalling the update if the issue occurs after Windows updates. To uninstall an update, follow these steps:

1. Press the Windows key + R to open the Run dialog box.
2. Type appwiz.cpl and hit Enter.
3. In the Uninstall or view a program page click on View Installed Updates.
4. Right-click on the recently installed update and select Uninstall.

2] Update Device Drivers

Outdated or corrupt device drivers are also known to cause Event ID 86 on Windows. Update your device drivers and check if the issue’s fixed.

Follow one of the methods below to update your device drivers:

1. You may check for Driver & Optional Updates via Windows Update to update your drivers
2. You may visit the manufacturer’s site to download the drivers.
3. Use a free driver update software
4. If you have the INF driver file already on your computer, then:

• • Open Device Manager.
  • Click the driver category to expand the menu.
  • Then choose the relevant driver and right-click on it.
  • Select Update Driver.
  • Follow the on-screen wizard to finish updating your drivers.

3] Update BIOS/Firmware

Updating BIOS can fix bugs related to specific hardware or add compatibility for new devices. BIOS is to make your PC run; updating it carries a huge risk. If anything goes wrong, it could stop your motherboard from working and stop your computer from starting as expected. Always follow the manufacturer’s BIOS updating process if you need to update your BIOS. Here’s how you can update your device’s BIOS.

4] Check Minidump files

Minidump files contain the most important memory regions of crashed processes. When a process crashes or a BSoD appears, a minidump file is written to the user’s disk and is later uploaded to Sentry. A minidump usually includes the runtime stack of every active thread during the time of the crash. You might want to check these log files to check for the causes.

5] System Restore to a point before the problem started

In case of an install failure or data corruption, performing a System Restore can make your device to its working condition without having to reinstalling the operating system. Doing so will repair the Windows environment by installing the files and settings saved in the restore point. Here’s how you can perform a System Restore. Note that this can be done only if you’ve created a System Restore Point earlier.

6] Repair Windows OS using Installation Media

If none of these methods were able to help you, repair the Windows OS using the Installation media. Here’s how you can do it:

1. Download Windows ISO and create a Bootable USB or DVD drive
2. Boot from the media and choose Repair your computer.
3. Under Advanced Troubleshooting, select Advanced Options > Troubleshoot.
4. Now click on Startup Repair and follow the instructions on-screen.

If the Event ID does not cause any issues like a BSOD but just logs itself in the Logs, you may choose to ignore it.

Fix: Event ID 1108, The event logging service encountered an error

What is SCEP certificate enrollment initialization?

Simple Certificate Enrollment Protocol or SCEP allows users to securely issue certificates to various network devices using an automatic enrollment technique. This process to issue certificates is more secure and scalable. It can also automate the task of certificate issuance.