z/OS Cryptographic Services PKI Services Guide and Reference
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


IKYP042E

z/OS Cryptographic Services PKI Services Guide and Reference
SA23-2286-00

IKYP042E
PKI SERVICES HAS NO REMAINING SERIAL NUMBERS FOR CERTIFICATE GENERATION.

Explanation

The PKI Services CA certificate can sign a finite number of certificates before it exceeds the maximum unique serial number usable by PKI Services (X'FFFFFFFE', or 4294967294). PKI Services has detected that the CA certificate has exceeded this maximum serial number.

System action

PKI Services background certificate processing is suspended. No certificates are issued until the problem is corrected. However, certificate request management functions are still available through the R_PKIServ callable service and the PKI Services Web pages.

System programmer response

Add a new CA domain to continue certificate generation capability under a new CA certificate. For more information, see Adding a new CA domain.

Routing code

2

Descriptor code

6

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014