Getting error: -1233 when importing a VeriSign certificate via Console One.

(Last modified: 29Nov2004)

This document (10095625) is provided subject to the disclaimer at the end of this document.

fact

Novell NetWare 6.5 Support Pack 2

Novell ConsoleOne 1.3.6c

Novell iManager 2

Novell Certificate Server 2.43

symptom

Getting error: -1233 when importing a VeriSign certificate via Console One.

cause

This indicates that the signed certificate returned by VeriSign was for a different KMO object than the one originally used for the Certificate Signing Request (CSR).

fix

Select the correct KMO object then complete the import.

If the original KMO object was deleted a new one will have to be created and the CSR process will need to be re-run.

note

The easiest way to verify that the correct KMO is being used for the correct signed certificate is via the following steps:

1. Using iMonitor (https://x.x.x.x:8009 then select iMonitor) examine the NDSPKI:Public Key attribute on the KMO object. Write down the last two lines of hexadecimal shorts of the value as shown in hex:
00110 55 BC 01 7F 85 55 9F DC BD 32 00 F5 C5 85 9E 1B - This is the second to last line
00120 55 02 03 01 00 01 U..... - This is the last line.

2. Now open email sent from Verisign. Copy and paste the certificate into Notepad and save as a signed.cer file. Copy from the first dash in the Begin Certificate section to the last dash in End Certificate:

3. Save this file as signed.cer

4. Double click on this file using Windows explorer. This brings up the Certificate dialog window. Then select Details - Public Key.

5. Write down the last two lines of the value displayed
D692 997E 9C0B E1EF 55BC 017F 8555 9FDC
BD32 00F5 C585 9E1B 5502 0301 0001

6. Compare the two to see if they match
00110 55 BC 01 7F 85 55 9F DC BD 32 00 F5 C5 85 9E 1B
00120 55 02 03 01 00 01 U.....

D692 997E 9C0B E1EF 55BC 017F 8555 9FDC
BD32 00F5 C585 9E1B 5502 0301 0001

If they do not match either the wrong signed cert is being used, the wrong kmo object is being used or the original object has been deleted.

document

Document Title:	Getting error: -1233 when importing a VeriSign certificate via Console One.
Document ID:	10095625
Solution ID:	NOVL99973
Creation Date:	29Nov2004
Modified Date:	29Nov2004
Novell Product Class:	Novell Directory Services

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.