Windows Security Log Event ID 4876

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Category
 • Subcategory
Object Access
 • Certification Services
Type Success
Corresponding events
in Windows 2003
and before
 
Discussions on Event ID 4876
Ask a question about this event

4876: Certificate Services backup started

On this page

Logged each time the Certification Authorities backup starts.  Event indicates type of backup below. Next, event 4877 shows when the backup completes.

This event event is only logged if "Backup and restore the CA database" is enabled on the Audit tab of the CA's properties in Certificate Services MMC snap-in and of course if the Certificate Services audit subcategory is enabled with auditpol.

Free Security Log Resources by Randy

Description Fields in 4876

Backup Type:

1 full backup
2 logs only

Supercharger Enterprise


 

Examples of 4876

Certificate Services backup started. 

Backup Type: 1

Keep me up-to-date on the Windows Security Log.
Email*:
*We will NOT share this

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection



 

Additional Resources