-1232 FFFFFB30 PKI E SUBJECT NAME COMPARISON FAILURE
Source
NetIQ® Certificate Server
Explanation
The subject name stored in the Server Certificate object is not the same as the subject name within the certificate that is being stored.
The subject name of a certificate in the Organizational Certificate Authority's certificate chain does not match the expected value.
The subject name of a certificate in the NetIQ* International Cryptographic Infrastructure (NICI) Machine Unique Certificate Authority's certificate chain does not match the expected value.
Possible Cause
The external Certificate Authority changed the requested subject name in the issued certificate.
Action
When requesting a certificate from an external Certificate Authority, you can specify any subject name. However, the Certificate Authority might impose restrictions on the syntax and ordering of the name components in the certificates that it creates. If your Certificate Authority has issued the certificate with subject name that is different than the one that you specified, you should examine the new subject name and determine whether it meets your needs. If so, ignore the error message and continue with the installation of the certificates into the Server Certificate object.
If the new subject name does not meet your needs, you should not accept the certificate. You should contact your Certificate Authority to determine its naming policy. Then delete the previously created Server Certificate object and create a new one specifying a subject name that conforms to the Certificate Authority's policy.
NOTE: Depending on the Certificate Authority that the original request was sent to, an additional charge could be assessed if the Certificate Authority issues an additional certificate. You should contact your Certificate Authority to determine its policy.
Possible Cause
The Server Certificate object is corrupted.
Action
Complete one or more of the following solutions in the order listed until the error is resolved:
Possible Cause
An internal error occurred.
Action
Complete one or more of the following solutions in the order listed until the error is resolved:
Possible Cause
The Organizational Certificate Authority object has been corrupted.
Action
Complete one or more of the following solutions in the order listed until the error is resolved:
WARNING: Use care when deleting the Organizational Certificate Authority. After the Organizational Certificate Authority object is deleted, all User and Server Certificates signed by the Certificate Authority will cease to be valid and should be deleted. After the new Organizational Certificate Authority has been created, certificates for user and servers can be re-created as needed.
WARNING: Use care when deleting User Certificates. Deleting a User Certificate also deletes the user's private key. Without the private key, data encrypted using the public key in the certificate (for example, e-mail) cannot be decrypted.
A trademark symbol (®, TM, etc.) denotes a NetIQ trademark. An asterisk (*) denotes a third-party trademark. For information on trademarks, see Legal Notices.