|Applies To||Keon Certificate Authority OneStep 6.0|
RSA Certificate Manager OneStep 6.8
Keon CA using OneStep sample
Sun Solaris 2.8
|Issue||KCA OneStep 6.0 Flat File Demo not working|
Installed KCA 6.0 on Solaris 8 and configured. Installed KCA 6.0 OneStep on same system. Setup OneStep SSL and all config files. Since this is Solaris, the sample .so files are installed in the /plugins directory. Went to the OneStep web page, selected Flat File, and entered proper information. Clicked Accept and got error.
Error: "The following error occurred. Certificate Generation Internal Error. Please click the button below to try again." in Keon Certificate Authority OneStep
The OneStep html page source shows:
var status = "1350";
var pstatus = "1356";
var lstatus = "";
var astatus = "";
var message = "";
|Cause||The KCA OneStep file ownership is incorrect. When installed, the files have an ownership of 115:staff which is incorrect.|
File ownership of OneStep/plugin/flatdemo.so, OneStep/ssl/certs/onestep.cert, and OneStep/ssl/private/onestep.key was set to root:root which is incorrect.
|Resolution||When you install KCA OneStep on UNIX, the ownership of the WebServer files must be corrected.|
Go to the KCA_Install_DIR as UNIX administrator and run:
chown -R nobody:nogroup WebServer
This example assumes that a user "nobody" and a group "nogroup" were used for webserver during KCA installation. Use appropriate user:group that was configured during the KCA installation.
|Legacy Article ID||a7914|