RSA Registration Manager installation fails at the last step with no option to apply LDAP ACL rule changes
Originally Published: 2006-03-24
Last Modified: 2023-10-06
Article Number
Applies To
Keon Registration Authority 6.5.1
Issue
RSA Registration Manager Administration Server cannot be accessed if target CA is subordinate CA when Microsoft Windows 2000 hotfix Q329115 applied
RSA Registration Manager Enrollment Server cannot be accessed if target CA is subordinate CA when Microsoft Windows 2000 hotfix Q329115 applied
Cause
The Microsoft hotfix deals with identity spoofing in that someone with an end-entity certificate could then issue a certificate even though they are not really a CA. If the subordinate CA certificate includes the Basic Constraints and Key Usage extensions, then access is restored.
Resolution
To correct this issue, either create the subordinate CA certificate with the Basic Constraints and Key Usage extensions, or re-sign the subordinate CA, adding the two extensions at that time.
Related Articles
Updating email template in workflow does not update "last modified" & "modified by" fields in RSA Governance & Lifecycle Number of Views The replication connection from local site [] to [] is abnormal since the last change was sent Number of Views AD account collector is not collecting the Last Login Date and Expiration Date in RSA Identity Governance and Lifecycle 7.0.2 Number of Views RSA Governance & Lifecycle Recipes: Report - AD Days Since Last Logon Number of Views RSA SecurID Appliance 3.0 hardware that can be upgraded to Authentication Manager 8.1 Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Reporting on RSA Authentication Manager 8.x users with On-Demand Token, a fixed passcode or a hardware/software token assi… How to Download OTP Token Seed Files from myRSA Anomalix idGenius - SAML Relying Party Configuration - RSA Ready Implementation Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?
