-1232 FFFFFB30 PKI E SUBJECT NAME COMPARISON FAILURE

Source

Novell® Certificate Server

Explanation

The subject name stored in the Server Certificate object is not the same as the subject name within the certificate that is being stored.

The subject name of a certificate in the Organizational Certificate Authority's certificate chain does not match the expected value.

The subject name of a certificate in the Novell International Cryptographic Infrastructure (NICI) Machine Unique Certificate Authority's certificate chain does not match the expected value.

Possible Cause

The external Certificate Authority changed the requested subject name in the issued certificate.

Action

When requesting a certificate from an external Certificate Authority, you can specify any subject name. However, the Certificate Authority might impose restrictions on the syntax and ordering of the name components in the certificates that it creates. If your Certificate Authority has issued the certificate with subject name that is different than the one that you specified, you should examine the new subject name and determine whether it meets your needs. If so, ignore the error message and continue with the installation of the certificates into the Server Certificate object.

If the new subject name does not meet your needs, you should not accept the certificate. You should contact your Certificate Authority to determine its naming policy. Then delete the previously created Server Certificate object and create a new one specifying a subject name that conforms to the Certificate Authority's policy.

NOTE: Depending on the Certificate Authority that the original request was sent to, an additional charge could be assessed if the Certificate Authority issues an additional certificate. You should contact your Certificate Authority to determine its policy.

Possible Cause

The Server Certificate object is corrupted.

Action

Complete one or more of the following solutions in the order listed until the error is resolved:

- Restore the Novell eDirectory™ partition that the corrupted Server Certificate object resides in from backup.
- Delete the Server Certificate object and create a new one.

Possible Cause

An internal error occurred.

Action

Complete one or more of the following solutions in the order listed until the error is resolved:

- Exit and restart ConsoleOne®.
- Unload and reload PKI.NLM.
- Upgrade to the latest version of Novell Certificate Server.
- Upgrade to the latest version of NICI.

Possible Cause

The Organizational Certificate Authority object has been corrupted.

Action

Complete one or more of the following solutions in the order listed until the error is resolved:

- Restore the eDirectory partition that the corrupted Organizational Certificate Authority object resides in from backup.
- Delete the Organizational Certificate Authority object and recreate it.

WARNING: Use care when deleting the Organizational Certificate Authority. After the Organizational Certificate Authority object is deleted, all User and Server Certificates signed by the Certificate Authority will cease to be valid and should be deleted. After the new Organizational Certificate Authority has been created, certificates for user and servers can be re-created as needed.

WARNING: Use care when deleting User Certificates. Deleting a User Certificate also deletes the user's private key. Without the private key, data encrypted using the public key in the certificate (for example, e-mail) cannot be decrypted.

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. For information on trademarks, see Legal Notices.