000019311 - KCA OneStep 6.0 Flat File Demo not working

Document created by RSA Customer Support Employee on Jun 15, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000019311
Applies ToKeon Certificate Authority OneStep 6.0
RSA Certificate Manager OneStep 6.8
Keon CA using OneStep sample
Sun Solaris 2.8
IssueKCA OneStep 6.0 Flat File Demo not working
Installed KCA 6.0 on Solaris 8 and configured.  Installed KCA 6.0 OneStep on same system.  Setup OneStep SSL and all config files.  Since this is Solaris, the sample .so files are installed in the /plugins directory.   Went to the OneStep web page, selected Flat File, and entered proper information. Clicked Accept and got error.
Error: "The following error occurred. Certificate Generation Internal Error. Please click the button below to try again." in Keon Certificate Authority OneStep
The OneStep html page source shows:

function print_status()
 var status = "1350";
 var pstatus = "1356";
 var lstatus = "";
 var astatus = "";
 var message = "";
CauseThe KCA OneStep file ownership is incorrect. When installed, the files have an ownership of 115:staff which is incorrect.
File ownership of OneStep/plugin/flatdemo.so, OneStep/ssl/certs/onestep.cert, and OneStep/ssl/private/onestep.key was set to root:root which is incorrect.
ResolutionWhen you install KCA OneStep on UNIX, the ownership of the WebServer files must be corrected.

Go to the KCA_Install_DIR as UNIX administrator and run:
  chown -R nobody:nogroup WebServer

This example assumes that a user "nobody" and a group "nogroup" were used for webserver during KCA installation. Use appropriate user:group that was configured during the KCA installation.
Legacy Article IDa7914