000021498 - Error: 'Error REQ.AUTHORIZE.XUDA line 518 XRC Conversion failure' when approving P10 certificate request in RSA Keon Certificate Authority

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000021498
Applies ToKeon Certificate Authority 6.5.1
Microsoft Windows 2000 Advanced Server SP3
IssueError: "Error REQ.AUTHORIZE.XUDA line 518 XRC Conversion failure" when approving P10 certificate request in RSA Keon Certificate Authority
Using KCA default VPN / IPSec extension profile
P10 certificate request contained the following:

PKCS10 message: 
VERSION:  1
SUBJECT:                              
  Common Name:               ipsec123
  Unstructured Name:         test123.vpn.testlab
PUBLIC KEY: 
  RSA Encryption:  1024 bits.
  MODULUS:    0xd761adf2 bc9d6d27 d1168c27 0f2184c3 4985a3e3 bfa40ad4 6d63f3d6 a0d4f7e5
              da94d6c7 e651126a 83e821b6 33d3d25a cc4c27ad b151743c c08a6c73 871ec662
              4b799b8a 577d711e e3451de3 6a55b8e7 474c025f 445649c9 10cef052 ab92cd58
              5f5429eb 461aa01c f198d676 ffa25e0c 82899503 4c58decd 8b979ae5 3121a745
  EXPONENT:    0x010001
ATTRIBUTES: 
REQUESTED EXTENSIONS: 
  Key Usage:                     Critical  Digital Signature, Key Encipherment
SIGNATURE: 
CauseError due to the Jurisdiction being used had Enforce DN definition and the certificate request only has unstructured name and common name. It was expecting other required fields.
ResolutionTo correct this issue, verify all required fields are in P10 requested or entered during certificate approval.
Legacy Article IDa23274

Attachments

    Outcomes