000013490 - A number of the vettor certificates for the RA seem to have disappeared since upgraded the CA.

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000013490
Applies ToKeon Certificate Authority 6.5.1
Keon Registration Authority 6.5.1
Sun Solaris 2.8

A number of the vettor certificates for the RA no longer appearing after the target CA was upgraded

admin-type field is "vettor1; .NET CLR 1.1.4322)" instead of "vettor"

CauseSome user objects have invalid values for admin-type field
ResolutionDuring the upgrade process, some user objects received  invalid values for admin-type field. This procedure will resolve this issue.

On the target CA perform these steps :

1) Create an LDIF file of the database using the re-index process from the documentation.
2) Edit the LDIF file and do a search/replace on the bad values for admin-type from "vettor1; NET CLR 1.1.43222)" to "vettor".
3) Finish the re-index procedure.
4) Synchronize your KRA with the target KCA.

All vettors will now be present.
WorkaroundThe target CA instance was upgraded to the same version to resolve a re-sign issue.
Legacy Article IDa40687