A number of the vettor certificates for the RA seem to have disappeared since upgraded the CA.
2 years ago
Originally Published: 2008-06-12
Article Number
000045944
Applies To
Keon Certificate Authority 6.5.1
Keon Registration Authority 6.5.1
Sun Solaris 2.8
Issue

A number of the vettor certificates for the RA no longer appearing after the target CA was upgraded


admin-type field is "vettor1; .NET CLR 1.1.4322)" instead of "vettor"


Cause
Some user objects have invalid values for admin-type field
Resolution
During the upgrade process, some user objects received  invalid values for admin-type field. This procedure will resolve this issue.

On the target CA perform these steps :

1) Create an LDIF file of the database using the re-index process from the documentation.
2) Edit the LDIF file and do a search/replace on the bad values for admin-type from "vettor1; NET CLR 1.1.43222)" to "vettor".
3) Finish the re-index procedure.
4) Synchronize your KRA with the target KCA.

All vettors will now be present.

Workaround
The target CA instance was upgraded to the same version to resolve a re-sign issue.