-1210 FFFFFB46 PKI E KEYS ALREADY EXIST

Source

Novell® Certificate Server

Explanation

A key pair already exists for the Organizational Certificate Authority.

Possible Cause

An Organizational Certificate Authority has already been created.

Action

No action is necessary if the existing Organizational Certificate Authority is still valid. If it is not, perform all of the following operations:

- Delete the Organizational Certificate Authority object.
- Wait for NDS® or Novell eDirectory™ to synchronize.
- Create a new Organizational Certificate Authority using ConsoleOne® or Novell iManager.

WARNING: Use care when deleting the Organizational Certificate Authority. After the Organizational Certificate Authority object is deleted, all User and Server Certificates signed by the Certificate Authority will cease to be valid and should be deleted. After the new Organizational Certificate Authority has been created, certificates for user and servers can be re-created as needed.

WARNING: Use care when deleting User Certificates. Deleting a User Certificate also deletes the user's private key. Without the private key, data encrypted using the public key in the certificate (for example., e-mail) cannot be decrypted.

Possible Cause

The Organizational Certificate Authority object has been deleted, but NDS or eDirectory has not yet synchronized.

Action

The partition that the Organizational Certificate Authority's object resides in must be synchronized to all servers that hold a replica before a new Organizational Certificate Authority can be created. Normally, synchronization will occur automatically, but it may take some time. If synchronization does not occur within a reasonable timeframe, run DSREPAIR.NLM on the servers in the replica ring.

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. For information on trademarks, see Legal Notices.