PKI_1.3.6.1.4.1.2011.6.122.34.0.2.26 hwPKIUpdateLocalCertFailScep

Description

PKI/4/PKIUPDATELOCALCERTFAILSCEP: OID [OID] Updating the local certificate through SCEP failed. (LocalCertIssuer=[LocalCertIssuer], LocalCertSubject=[LocalCertSubject])

The local certificate failed to be updated through SCEP.

Attribute

Alarm ID	Alarm Severity	Alarm Type
1.3.6.1.4.1.2011.6.122.34.0.2.26	Warning	communicationsAlarm

Parameters

Name	Meaning
OID	Indicates the MIB object ID of the alarm.
LocalCertIssuer	Indicates the issuer of the local certificate.
LocalCertSubject	Indicates the subject of the local certificate.

Impact on the System

The certificate may be unavailable.

Possible Causes

There is no reachable route between the device and CA server.
The PKI configurations of the device and CA server are incorrect.
The CA server is faulty.

Procedure

Run the ping command to check whether there is a reachable route between the device and CA server.
If not, check the route and link to ensure that there is a reachable route between the device and CA server.
Run the display pki realm command to check whether the PKI configurations of the device and CA server are correct. The PKI configurations include the CA server URL, CA name, digest algorithm used to sign certificate enrollment requests, challenge password used in SCEP certificate application, and CA certificate digital fingerprint.
If not, ensure that the PKI configurations are correct.
Check whether the CA server is working properly.
If not, ensure that the CA server is working properly.
Collect alarm and configuration information, and contact technical support personnel.