000015667 - Unable to renew certificate after clicking on a link to auto-renew-certificate.xuda page in email notification

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000015667
Applies ToRSA Certificate Manager 6.8
IssueUnable to renew certificate after clicking on a link to auto-renew-certificate.xuda page in email notification
Clicking on the link to renew certificate, selecting the certificate to be renewed when prompted by the browser, and finally clicking on 'Renew Certificate' button shows the following error:

An error [XrcXUDAUNABLE: unable to contact directory server] was encountered attempting to renew your certificate. Please contact your administrator for more information. You may be asked to supply some or all of the following information:
[details of the certificate to be renewed]
The URL for certificate renewal looks like the following:  https://<RCM-hostname>:<renewal-port>/auto-renew-certificate.xuda
CauseThe certificate renewal URL does not include jurisdiction ID that the certificate being renewed belongs to.
ResolutionThe certificate renewal URL must include the jurisdiction ID that the certificate being renewed belongs to.  If the renewal email is being sent out by RSA Certificate Manager (RCM), through configuring Certificate Expiry Notification for the jurisdiction(s), note that:

if autonotice_renewurl is not defined in xudad.conf, the default url constructed by RCM automatically includes the respective domainID (jurisdiction ID)
- if autonotice_renewurl is defined in xudad.conf, then text of the email notification template in Certificate Expiry Notification section for the jurisdiction(s) should be updated as follows (notice that domainid is not and cannot be part of the url defined in xudad.conf):
  
[!--AUTONOTICE_RENEWAL]?DomainID=[!--AUTONOTICE_JURISDICTION]
Notes

For more details on configuring expiry notifications, see RSA Certificate Manager 6.8 Administrator's Guide, section "Configuring Certificate Expiry Notification", pages 138-142.

Legacy Article IDa51924

Attachments

    Outcomes