Troubleshooting Pki; Failed To Retrieve A Ca Certificate; Failed To Request A Local Certificate - 3Com 4500G Family Configuration Manual

Troubleshooting PKI

Failed to Retrieve a CA Certificate

Symptom
Failed to retrieve a CA certificate.
Analysis
Possible reasons include these:
The network connection is not proper. For example, the network cable may be damaged or loose.
No trusted CA is specified.
The URL of the registration server for certificate request is not correct or not configured.
No authority is specified for certificate request.
The system clock of the device is not synchronized with that of the CA.
Solution
Make sure that the network connection is physically proper.
Check that the required commands are configured properly.
Use the ping command to check that the RA server is reachable.
Specify the authority for certificate request.
Synchronize the system clock of the device with that of the CA.

Failed to Request a Local Certificate

Symptom
Failed to request a local certificate.
Analysis
Possible reasons include these:
The network connection is not proper. For example, the network cable may be damaged or loose.
No CA certificate has been retrieved.
The current key pair has been bound to a certificate.
No trusted CA is specified.
The URL of the registration server for certificate request is not correct or not configured.
No authority is specified for certificate request.
Some required parameters of the entity DN are not configured.
Solution
Make sure that the network connection is physically proper.
Retrieve a CA certificate.
Regenerate a key pair.
Specify a trusted CA.
Use the ping command to check that the RA server is reachable.
Specify the authority for certificate request.
Configure the required entity DN parameters.
1-20