-1240 FFFFFB28 PKI E PARSE CERTIFICATE

Source

Novell® Certificate Server

Explanation

Novell Certificate Server was unable to parse a certificate that has been stored or is being stored.

Possible Cause

The user attempted to store a certificate or a certificate chain with an invalid encoding into a Server Certificate object. The certificate or certificate chain obtained from the Certificate Authority is invalid.

Action

Perform the following operations:

- Contact the Certificate Authority that issued the server certificate to obtain the Certificate Authority's certificate.
- Using ConsoleOne®, view the Server Certificate object. Click Import.
- Import the Certificate Authority's certificate as the trusted root.
- Import the server's certificate as the object certificate.

If the problem persists, contact the Certificate Authority.

Possible Cause

PKI.NLM is not compatible with the version of the Novell Certificate Server snap-in used in ConsoleOne.

Action

Complete one or more of the following solutions in the order listed until the error is resolved:

- Use compatible versions of the Novell Certificate Server snap-in for ConsoleOne and PKI.NLM.
- Upgrade to the latest version of Novell Certificate Server.

Possible Cause

The object that the certificate has been stored in is corrupted.

Action

Complete one or more of the following solutions in the order listed until the error is resolved:

- Restore the Novell eDirectory™ partition that the corrupted object resides in from backup.
- If the certificate is in a User object, delete the certificate and create a new one.
- If the certificate is in a Server Certificate object, delete the Server Certificate object and create a new one.
- If the certificate is in the Organizational Certificate Authority object, delete the Organizational Certificate Authority object and create a new one.

WARNING: Use care when deleting the Organizational Certificate Authority. After the Organizational Certificate Authority object is deleted, all User and Server Certificates signed by the Certificate Authority will cease to be valid and should be deleted. After the new Organizational Certificate Authority has been created, certificates for user and servers can be re-created as needed.

WARNING: Use care when deleting User Certificates. Deleting a User Certificate also deletes the user's private key. Without the private key, data encrypted using the public key in the certificate (for example, e-mail) cannot be decrypted.

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. For information on trademarks, see Legal Notices.