000024990 - Error: 'Certificate Generation Internal Error' in RSA Keon OneStep due to insufficient license

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000024990
Applies ToKeon Certificate Authority 6.5.1
Keon Certificate Authority OneStep 6.5.1
Microsoft Windows 2000
IssueError: "Certificate Generation Internal Error" in RSA Keon OneStep due to insufficient license
Keon OneStep was configured on a Keon Certificate Authority (KCA) installation and users were able to issue certificates successfully
No changes were made to the KCA and OneStep configuration
When attempting to get certificate through OneStep, users started to get the error "Certificate Generation Internal Error" in web browser. No user can get a new certificate.
CauseThe number of certificates allowed under the license installed in KCA has reached its limit. If no license was installed, then the KCA has reached the limit of certificates (20 users) allowed under the evaluation license.
ResolutionTo correct this issue, verify that the KCA has reached its licensed limit on the number of certificates that can be issued. On a Windows system, check the Windows Event Viewer Application logs. KCA Secure Directory Server logs the license limit as well as the current number of users in the Windows Event logs.

If the issue is confirmed to be the license limitation, either upgrade (or install, if not present) the KCA license or revoke (or delete) a few certificates in KCA. KCA services may need to be restarted.
Legacy Article IDa26232