Collecting data on my revoked certs I ran into an issue.
Command I am using:
Get-revokedRequest -CertificationAuthority MYSERVER | Export-Csv Export.csv
I was running commanbds locally on my PKI server which is running Server 2008 R2.
Entire error message I get is below. Let me know what further information you may need:
Exception calling "Next" with "0" argument(s): "CEnumCERTVIEWROW::Next: The handle is invalid. 0x80070006 (WIN32: 6)"
At C:\Windows\system32\WindowsPowerShell\v1.0\Modules\pspki\Server\Get-RequestRow.ps1:69 char:19
+ while ($Row.Next <<<< () -ne -1) {
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : ComMethodTargetInvocation
Comments: I think you ran into handle expiration. CA view handles are not persistent, they valid only for a defined timespan. That is, when you open view connection to CA database, view handle is valid for 10 minutes (by default). Once 10 minutes are passed, the handle become invalid. I asked about revoked certificate count, because it is a common reason (large output DB row count) for this error to appear. You can try to increase handle validity by running the following command on CA server: ``` CMD certutil -setreg ca\ViewAgeMinutes 30 ``` restart CA service and try again. You can set a larger value if necessary. If you want to return to default value in future, just set it to 10 minutes.
Command I am using:
Get-revokedRequest -CertificationAuthority MYSERVER | Export-Csv Export.csv
I was running commanbds locally on my PKI server which is running Server 2008 R2.
Entire error message I get is below. Let me know what further information you may need:
Exception calling "Next" with "0" argument(s): "CEnumCERTVIEWROW::Next: The handle is invalid. 0x80070006 (WIN32: 6)"
At C:\Windows\system32\WindowsPowerShell\v1.0\Modules\pspki\Server\Get-RequestRow.ps1:69 char:19
+ while ($Row.Next <<<< () -ne -1) {
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : ComMethodTargetInvocation
Comments: I think you ran into handle expiration. CA view handles are not persistent, they valid only for a defined timespan. That is, when you open view connection to CA database, view handle is valid for 10 minutes (by default). Once 10 minutes are passed, the handle become invalid. I asked about revoked certificate count, because it is a common reason (large output DB row count) for this error to appear. You can try to increase handle validity by running the following command on CA server: ``` CMD certutil -setreg ca\ViewAgeMinutes 30 ``` restart CA service and try again. You can set a larger value if necessary. If you want to return to default value in future, just set it to 10 minutes.