Problems when you create or modify a certifier

If you have problems creating or modifying a server-based CA -- for example, the CA process doesn't load when you issue the command Tell Load CA or returns an error -- check the following:

• The administrator's location document must point to the server on which the CA process is running.
• The mail file location on the Mail tab of the administrator's location document must point to the server on which the CA process is running.
• The administrator's public key must be in the Domino Directory for the server specified in the location document.
• CA administrators must have at least Editor access to the master Domino Directory for the domain.

When you create a new certifier, make changes to an existing one, or revoke a certificate, the changes usually take place by the time the CA process refreshes itself. Sometimes the process takes longer, because:

• The CA process has to create or update the CA configuration documents, and, in the case of Internet certifiers, post a CRL.
• The CA process may be running on a server other than the one that hosts the master Domino Directory, adding replication delays to the process.
• Replication of the Administration Requests database can add delays. A request or change may be approved on one replica, but the change has to be replicated to other servers in the domain.

tell adminp process all

tell ca refresh

tell ca stat

For more information about configuring and using a server-based CA, see the topic The Domino server-based certification authority.

Related topics

Troubleshooting the Domino system
Lotus Support

Glossary