Microsoft
Microsofthey,
used this article to solve an issue after finished this step-by-step guide after importing the registry keys the services didn't started.
i had to remove the old & expired certificates from the CA configuration so they wont stop the services startup.
error i got: "the policy module for a ca is missing or incorrectly registered 0x2"
https://social.technet.microsoft.com/Forums/Lync/en-US/107d431f-3003-4ab2-94f7-bed355d7d43d/active-directory-certificate-services-wont-start-error-100?forum=winserversecurity
comment that helped me:
############################################
I know this is a really old thread to bring up but hopefully this can help someone googling for this problem. I recently did a 2003 to 2012 r2 migration and had the same exact issue you describe. The CA would restore and start fine until I imported the registry backup from the old CA.
After a call with Microsoft and several hours troubleshooting we came across the solution. I did not find this page during any of my googling but here it is.
https://support.microsoft.com/en-us/help/969302/certificate-server-service-does-not-start-and-you-receive-the-error-the-data-is-invalid.-0xd-win32-13-on-a-windows-2003-based-certificate-authority
Basically there is an expired cert or cert missing the private key in the CAcerthash registry key. In my case it was an expired cert.
In order to resolve the issue
1. Open up the certificate mmc and select computer
2. Open the personal certificate store
3. Look for certificates that either display no private key icon or that have an expiration date that has passed.
4. Open the certificate and take note of the thumbprint in the details pain. You will need to match this up to the thumbprints present in your CAcerthash registry.
5. Once you have your thumbprints check the CA certhash registry for the missing or expired cert thumbprint and replace the thumbprint values with the minus sign -
6. Save the registry key and attempt to start the certificate authority.
This worked for me so hopefully someone else finds this helpful.
############################################
