Why does my custom extension profile with AKI extension NOT work after upgrading to KCA 6.5.1?
2 years ago
Originally Published: 2003-12-05
Article Number
000057406
Applies To
Keon Certificate Authority 6.5.1
Issue
Why does my custom extension profile with AKI extension NOT work after upgrading to KCA 6.5.1?
Certificates cannot be issued through Certificate Management Protocol (CMP) clients if profile enforcement is turned on and the profile includes the Authority Key Identifier (AKI) extension

Cause
In Keon CA 6.5.1, the extension script for the AKI extension was modified to offer full support as defined in RFC 3280

Resolution
If any custom profiles were created before upgrading to Keon CA 6.5.1, the extension script for the AKI extension defined for each custom profile must be manually modified after the upgrade. For detailed instructions, see section "Configuring Extension Attributes" on page 248 of the RSA Keon Certificate Authority 6.5.1 Administrator's Guide.
Workaround
Keon CA was upgraded from a previous version to Keon CA 6.5.1