Unable to remove Invalidity Date Extension for CRLs issued against a CA in KCA 6.5.1
2 years ago
Originally Published: 2004-07-22
Article Number
000060281
Applies To
Sun Solaris 2.8
Keon Certificate Authority 6.5.1
Microsoft Windows 2000 Server SP4
Issue
Unable to remove Invalidity Date Extension for CRLs issued against a CA in KCA 6.5.1
Build 220 of Keon Certificate Authority 6.5.1 introduced a new feature that enables administrators to configure whether or not the Invalidity Date extension should be included in the CRL on a per CA basis. However, when trying to use this functionality, the following error is presented:

    XUDA_addmodifyop: [XrcNOTFOUND] unable to locate requested member or object
    ObjectClass xuda_ca: Adding field CRLINVALIDITYDATEMODE failed!
Cause
This feature cannot be used until the KCA database schema has been updated
Resolution
After applying Build 120 and higher, you must go to the following administrative URL in the KCA:

    https://<servername>:<admin-port>/ca/ca-ops/invaliditydate-crl-ext-schema-update.xuda

When the update is complete, you must restart the KCA Services for the update to be complete.