Windows Security Log Event ID 4876

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
 • Subcategory
Object Access
 • Certification Services
Type Success
Corresponding events
in Windows 2003
and before

4876: Certificate Services backup started

On this page

Logged each time the Certification Authorities backup starts.  Event indicates type of backup below. Next, event 4877 shows when the backup completes.

This event event is only logged if "Backup and restore the CA database" is enabled on the Audit tab of the CA's properties in Certificate Services MMC snap-in and of course if the Certificate Services audit subcategory is enabled with auditpol.

Free Security Log Resources by Randy

Description Fields in 4876

Backup Type:

1 full backup
2 logs only

Supercharger Free Edition



Upcoming Webinars
    Additional Resources