- Stop the "Active Directory Certificate Services" service.
- Optional: Copy content of C:\Windows\System32\CertLog to another location.
- Delete edb.chk and *.log files.
- Start the "Active Directory Certificate Services"
net stop CertSvc del /Q %windir%\System32\CertLog\*.log del /Q %windir%\System32\CertLog\edb.chk net start CertSvc