IKYS022I This CA is restricted from creating intermediate CA certificates.
Explanation
The CA certificate in use has a path length constraint
value of zero, which prohibits the creation of subordinate or intermediate
CA certificates when the EnablePathLenConstraint keyword
is set to T in the pkiserv.conf file.
System action
None. This message is issued at initialization time
to inform you that the CA certificate is restricted from creating
CA certificates.
System programmer response
No action is necessary if this configuration
is intended. If this configuration is not intended, perform one of
the following actions and restart PKI Services:
- Disable path length constraint by removing the EnablePathLenConstraint keyword in the pkiserv.conf file or by setting its value to F.
- Reconfigure PKI Services to use a CA certificate that does not constrain the path length, or that has the path length greater than zero.