Oki C9600 Service Manual page 225

Error occurs with Client Certificate Import.
Phenomenon:
When Import Client Certificate is executed for EAP authentication, an error occurs, and Import
fails.
Possible cause
The file format of the client certificate is
incorrect.
Client certificate does not contain the
private key.
An unsupported hash algorithm is used in
the certificate.
'Client authentication' has not been set in
the 'Extended key Usage' attribute of the
certificate.
An unsupported key size is used in the
certificate.
The certificate file size is too large.
Error occurs with CA Certificate Import.
Phenomenon:
When Import CA Certificate is executed for EAP authentication, an error occurs, and Import fails.
Possible cause
The file format of the CA certificate is
incorrect.
An unsupported key size is used in the
certificate.
An unsupported hash algorithm is used in
the certificate.
The certificate file size is too large.
42930511TH Rev. 2
Ask the certificate distributor to provide the client certificate file again in
thePKCS#12 format.
Ask the certificate distributor to provide the client certificate in the file form
that contains the private key.
Ask the Certification Authority to reissue the certificate using the MD5 or
SHA1 hash algorithm.
Ask the Certification Authority to reissue the certificate in which 'Client
authentication' has been set. (Normally, 'Client authentication' has been
set in the certificate issued for EAP authentication of the wireless LAN.)
Ask the Certification Authority to reissue the certificate generated with any
of the key sizes 512/1024/2048/4096bits.
Normal certificate files never result in an Import error due to excess size.
There's a possibility that the certificate file may be incorrect or multiple
certificates may be contained, such as certificate chain. Ask the Certifica-
tion Authority to issue the correct certificate.
Ask the certification distributor to provide the CA certificate file in DER or
PEM format again.
Ask the Certification Authority to reissue the certificate generated with any
of the key sizes 512/1024/2048/4096bits.
Ask the Certification Authority to reissue the certificate using the MD5 or
SHA1 hash algorithm.
Normal certificate files never result in an Import error due to excess size.
There's a possibility that the certificate file may be incorrect or multiple
certificates may be contained, such as certificate chain. Ask the Certifica-
tion Authority to issue the correct certificate.
Oki Data CONFIDENTIAL
What to do
What to do
225 /