000025922 - Downloading the Encryption certificate results in an empty file in Keon Key Recovery Module

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000025922
Applies ToKeon Certificate Authority 6.5.1
Keon Key Recovery Module 6.5.1
Microsoft Windows 2000
Sun Solaris
IssueDownloading the Encryption certificate results in an empty file in Keon Key Recovery Module
After enrolling for a certificate pair with the Keon Key Recovery Module, the user is directed to an SSL-protected Web page where the Signing and Encryption Certificate can be downloaded. The signing Certificate can be downloaded and viewed within the browser. When the link is selected to download the Encryption certificate/key PKCS#12 file, the resulting download is 0 bytes in size.
Cypher log in the KCA Webserver/logs directory show an untrusted certificate error
Critical Basic Constraints with unlimited path length is configured for the jurisdiction
CauseThis is an issue with Basic Constraints in the Root or Subordinate CA being set to unlimited - if the basic constraints is set to 10 the problem will no longer occur
ResolutionThis issue has been resolved in hot fix build 222 of KCA 6.5.1. Please contact RSA Security Customer Support to obtain this hot fix.
Legacy Article IDa20665