85 lines
5.8 KiB
HTML
85 lines
5.8 KiB
HTML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE html
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html lang="en-us" xml:lang="en-us">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<meta name="security" content="public" />
|
|
<meta name="Robots" content="index,follow" />
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|
<meta name="DC.Type" content="task" />
|
|
<meta name="DC.Title" content="Troubleshoot assigning a user certificate" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzahurzahu666dcmtroubleshooting.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzahuregisteruser.htm" />
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
|
|
<meta name="DC.Format" content="XHTML" />
|
|
<meta name="DC.Identifier" content="rzahu40z_trouble_user_ca_tasks" />
|
|
<meta name="DC.Language" content="en-us" />
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|
<!-- US Government Users Restricted Rights -->
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|
<title>Troubleshoot assigning a user certificate</title>
|
|
</head>
|
|
<body id="rzahu40z_trouble_user_ca_tasks"><a name="rzahu40z_trouble_user_ca_tasks"><!-- --></a>
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|
<h1 class="topictitle1">Troubleshoot assigning a user certificate</h1>
|
|
<div><div class="section"> <p>When you use the <span class="uicontrol">Assign a user certificate</span> task,
|
|
Digital Certificate Manager (DCM) displays certificate information for you
|
|
to approve before registering the certificate. If DCM is unable to display
|
|
a certificate, the problem might be caused by one of these situations: </p>
|
|
</div>
|
|
<ol><li><span>Your browser did not request that you select a certificate to present
|
|
to the server. This may happen if the browser cached a previous certificate
|
|
(from accessing a different server). Try clearing the browser's cache and
|
|
try the task again. The browser will prompt you to select a certificate.</span></li>
|
|
<li><span>This may also happen if you configure your browser so that it does
|
|
not display a selection list and the browser contains only one certificate
|
|
from a Certificate Authority (CA) in the list of CAs that the server trusts.
|
|
Check your browser configuration settings and change them, if necessary. Your
|
|
browser will then prompt you to select a certificate. If you cannot present
|
|
a certificate from a CA that the server is set to trust, you cannot assign
|
|
a certificate. Contact your DCM administrator. </span></li>
|
|
<li><span>The certificate that you want to register is already registered
|
|
with DCM. </span></li>
|
|
<li><span>The Certificate Authority that issued the certificate is not designated
|
|
as trusted for the system or the application in question. Therefore, the certificate
|
|
you are presenting is not valid. Contact your system administrator to determine
|
|
if the CA that issued your certificate is correct. If the CA is correct, the
|
|
system administrator may need to <span class="uicontrol">Import</span> the CA certificate
|
|
into the *SYSTEM certificate store. Or, the administrator may need to use
|
|
the <span class="uicontrol">Set CA status</span> task to enable the CA as trusted
|
|
to correct the problem.</span></li>
|
|
<li><span>You do not have a certificate to register. You can check for user
|
|
certificates in your browser to see if this is the problem. </span></li>
|
|
<li><span>The certificate that you are trying to register is expired or incomplete.
|
|
You must either renew the certificate or contact the CA that issued it to
|
|
resolve the problem.</span></li>
|
|
<li><span>The <span class="keyword">IBM<sup>®</sup> HTTP Server for i5/OS™</span> is
|
|
not correctly set up to do certificate registration using SSL and client authentication
|
|
on the secure Administrative server instance. If none of the previous troubleshooting
|
|
tips works, contact your system administrator to report the problem.</span></li>
|
|
</ol>
|
|
<div class="section"> <p>To <span class="uicontrol">Assign a user certificate</span>, you must
|
|
connect to Digital Certificate Manager (DCM) by using an SSL session. If you
|
|
are not using SSL when you select the <span class="uicontrol">Assign a user certificate</span> task,
|
|
DCM displays a message that you must use SSL. The message contains a button
|
|
so that you can connect to DCM by using SSL. If the message displays without
|
|
the button, inform your system administrator of the problem. The Web server
|
|
may need to be restarted to ensure that the configuration directives for using
|
|
SSL are activated. </p>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzahurzahu666dcmtroubleshooting.htm" title="Review this information to learn how to resolve some of the more common errors that you may experience when using DCM.">Troubleshoot DCM</a></div>
|
|
</div>
|
|
<div class="reltasks"><strong>Related tasks</strong><br />
|
|
<div><a href="rzahuregisteruser.htm" title="You can assign a user certificate that you own to your i5/OS user profile or other user identity. The certificate may be from a private Local CA on another system or from a well-known Internet CA. Before you can assign a certificate to a user identity, the issuing CA must be trusted by the server, and the certificate must not already be associated with a user profile or other user identity on the system.">Assign a user certificate</a></div>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html> |