If you have been trying to resolve a Windows Error code 87 you are in luck. Our how-to guide will walk you through the steps needed to clean up the problem from your PC.

Description

If you are an IT professional or server administrator and you are trying to subordinate an Enterprise Certificate Authority with incorrect domain settings for the domain servers, you will receive error code 87.

Solution

This message is one that will typically only be seen by administrators during server maintenance tasks or configuration changes. The steps leading up to the error and any subsequent fixes should not be attempted by someone who is unfamiliar with Windows servers and Certificate Authority settings. Taking the wrong steps or making a mistake can cause massive network errors and can cause a server to become unresponsive. This fix is intended for advanced computer users only.

Here are the steps that you will need to perform on your Windows Certificate server in order to resolve error code 87:

• Access the user account that is subordinating the CA server in Active Directory.
• Grant the SeRestorePrivilege to the user account to allow the necessary rights to make the needed CA changes.
• Alternatively, you can assign the right to the Enterprise Administrators group and add that account to the group if it is not already a member.
• Log out of the network and log back in with the account that has been granted the elevated privileges.
• Attempt to subordinate the CA again. The error message should be resolved.

As this fix requires elevated permissions in the Active Directory, you may need to work with a system admin who has the necessary security rights to increase the privileges on your account. If you do not have rights to elevate your own privileges or those of the Enterprise Administrators group, you will not be able to perform these steps on your own without administrator assistance.

TipFor more information, please see: How to fix Certificate error #87