Troubleshooting PKI 1849Failed to Request a LocalCertificateSymptomFailed to request a local certificate.AnalysisPossible reasons include these:■ The network connection is not proper. For example, the network cable may bedamaged or loose.■ No CA certificate has been retrieved.■ The current key pair has been bound to a certificate.■ No trusted CA is specified.■ The URL of the enrollment server for certificate request is not correct or notconfigured.■ No RA is configured.■ Some required parameters of the entity DN are not configured.Solution■ Make sure that the network connection is physically proper.■ Retrieve a CA certificate.■ Regenerate a key pair.■ Specify a trusted CA.■ Use the ping command to check that the RA server is reachable.■ Configure the RA for certificate request.■ Configure the required entity name space parameters.Failed to Retrieve CRLs SymptomFailed to retrieve CRLs.AnalysisPossible reasons include these:■ The network connection is not proper. For example, the network cable may bedamaged or loose.■ No CA certificate has been retrieved before you try to retrieve CRLs.■ The IP address of LDAP server is not configured.■ The URL for CRL distribution is not configured.■ The LDAP server version is wrong.Solution■ Make sure that the network connection is physically proper.■ Retrieve a CA certificate.■ Specify the IP address of the LADP server.■ Specify the URL for CRL distribution.■ Re-configure the LDAP version.
