000022572 - Error: 'Complete CRL Publishing failed: Complete CRL Publishing is not turned on for any of the jurisdictions.' when manually publishing CRL in RSA Keon Certificate Authority and RSA Certificate Manager

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000022572
Applies ToKeon Certificate Authority 6.5.1
RSA Certificate Manager 6.6
IssueError: "Complete CRL Publishing failed: Complete CRL Publishing is not turned on for any of the jurisdictions." when manually publishing CRL in RSA Keon Certificate Authority and RSA Certificate Manager
Local CRL publishing is enabled for the selected CA and "Publish Complete CRL" button is clicked
Publishing of CRL to an external LDAP is not enabled for any of the jurisdictions for the selected CA
Local publishing of CRL succeeds, but error message is still there
ResolutionWhen you click on "Publish Complete CRL", if a CRL already exists, the CA tries to publish it locally and externally. The above error indicates that at least one of the two publishing attempts failed. In the above scenario, local publishing of CRL succeeds as intended; however, the error message is misleading. RSA Security will correct this misleading error message in a future release of RSA Certificate Manager.

To verify that local publishing worked properly, follow these steps:

1. Click "Generate complete CRL"

2. Look in the folder <INSTALL_DIR>/WebServer/crl-server for a newly created file having your CA nickname and .CRL as its extension

3. Delete that same file

4. Click on "Publish complete CRL", the file should be recreated
Legacy Article IDa29233

Attachments

    Outcomes