RSA Registration Manager installation fails at the last step with no option to apply LDAP ACL rule changes
Originally Published: 2006-03-24
Article Number
Applies To
Keon Registration Authority 6.5.1
Issue
RSA Registration Manager Administration Server cannot be accessed if target CA is subordinate CA when Microsoft Windows 2000 hotfix Q329115 applied
RSA Registration Manager Enrollment Server cannot be accessed if target CA is subordinate CA when Microsoft Windows 2000 hotfix Q329115 applied
Cause
The Microsoft hotfix deals with identity spoofing in that someone with an end-entity certificate could then issue a certificate even though they are not really a CA. If the subordinate CA certificate includes the Basic Constraints and Key Usage extensions, then access is restored.
Resolution
To correct this issue, either create the subordinate CA certificate with the Basic Constraints and Key Usage extensions, or re-sign the subordinate CA, adding the two extensions at that time.
Related Articles
Adding the option to customize the name of the High-Level Maintain state button in fine-grained role reviews in RSA Govern… 22Number of Views An option to edit the display buttons of the Review and Remove buttons in Group and Role Reviews has been added in RSA Ide… 42Number of Views RSA Governance & Lifecycle Recipes: Generating Coverage Files from Reports 58Number of Views "ORA-00020: maximum number of processes (500) exceeded" when attempting to connect to the Oracle Database on IGL 39Number of Views Howto: Change the Master Encryption Key Storage Directory in RSA Identity Governance and Lifecycle (IGL) 103Number of Views
Trending Articles
RSA SecurID software token .sdtid file fails to import into RSA SecurID Software Token 5.0 for Windows How a Multi-App Entitlement Collector (MAEDC) resolves entitlement relationships with accounts and groups collected by a M… RSA Governance & Lifecycle 8.0 Patch 10 Release Notes Cloud Administration Clear PIN RSA DS100 OTP Credential API User Event Monitor Messages for Cloud Access Service (20601 - 38000)
Don't see what you're looking for?