000020963 - Why does my custom extension profile with AKI extension NOT work after upgrading to KCA 6.5.1?

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000020963
Applies ToKeon Certificate Authority 6.5.1
IssueWhy does my custom extension profile with AKI extension NOT work after upgrading to KCA 6.5.1?
Certificates cannot be issued through Certificate Management Protocol (CMP) clients if profile enforcement is turned on and the profile includes the Authority Key Identifier (AKI) extension
Cause
In Keon CA 6.5.1, the extension script for the AKI extension was modified to offer full support as defined in RFC 3280
ResolutionIf any custom profiles were created before upgrading to Keon CA 6.5.1, the extension script for the AKI extension defined for each custom profile must be manually modified after the upgrade. For detailed instructions, see section "Configuring Extension Attributes" on page 248 of the RSA Keon Certificate Authority 6.5.1 Administrator's Guide.
Workaround
Keon CA was upgraded from a previous version to Keon CA 6.5.1
Legacy Article IDa19681

Attachments

    Outcomes