You need to ensure that in the future, other services that fail do not result in the same type of failure
You need to delegate the tasks to issue, approve, and revoke certificates to members of the Cert Administrators group
You need to ensure that Kerberos version 5 authentication is used for all client computers on the internal network