000019572 - SCEP URL requests fail on Keon Certificate Authority 6.0

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000019572
Applies ToKeon Certificate Authority 6.0
Microsoft Windows 2000 SP2
Microsoft Windows NT 4.0 SP6a
Sun Solaris
SCEP
IssueSCEP URL requests fail on Keon Certificate Authority 6.0
SCEP Error logs:

\RSA_KeonCA\WebServer\logs\scep-error.log
\RSA_KeonCA\WebServer\logs\scep-access.log

Show the following errors:

operation=GetCACert&message=RouterCA HTTP/1.0 200 47
operation=GetCACert&message=RouterCA HTTP/1.0 404 409
CauseThe RSAKeonCAAdministratorsGuide.pdf document states on page 293 that the SCEP URL format should be as follows:

http://<scep-server-host>:<scep-server-port>/domainID=<jurisdiction-id>/pkiclient.exe
ResolutionThe "domainID=" value in the SCEP URL is not required.  The correct format for the SCEP URL request should be as follows:

http://<scep-server-host>:<scep-server-port>/<jurisdiction-id>/pkiclient.exe

This will be corrected in future releases of the documentation.
Legacy Article IDa10494

Attachments

    Outcomes