000021673 - Why can a certificate be issued from a refused certificate request?

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000021673
Applies ToKeon Certificate Authority 6.0
IssueWhy can a certificate be issued from a refused certificate request?
A certificate can be issued from a refused certificate request
CauseRefusing a certificate request does not remove the certificate request from the KCA database. The request stays in the database in case the CA administrator or vettor later decides that the certificate should be approved, for example, if the certificate request was refused by mistake or someone high in the hierarchy of the organization with the authority to force the approval did so.
ResolutionIf your policies require that refused certificate requests should not be used to issue a certificate at a later time, the refused certificate request must be deleted from the KCA database.
Legacy Article IDa11705

Attachments

    Outcomes