PKI/4/YANG_CERT_UPDATE_ERR

Message

PKI/4/YANG_CERT_UPDATE_ERR: Updating the [certificate-type] certificate (realm=[realm-name]) through controller failed (ReasonCode=[reason-code], Reason=[reason]).

Description

The certificate failed to be updated through the controller.

Parameters

Parameter Name	Parameter Meaning
certificate-type	Specifies the certificate type.
realm-name	Specifies the name of a PKI realm.
reason-code	Specifies the reason code of the certificate update failure: 3: Invalid realm 4: Shadow certificate does not exist 5: Refreshing certificate failed 6: Replacing key failed 7: Certificate file does not exist 8: Parsing file content failed 9: Unsupported file format 11: Saving shadow certificate failed 12: Getting key of certificate Failed 13: Saving shadow key failed 14: Saving certificate file failed 15: Importing certificate file failed 16: Importing key failed 18: Replacing certificate does not exist 19: Invalid certificate path 20: Unsupported operation
reason	Specifies the reason of the certificate update failure: Invalid realm Shadow certificate does not exist Refreshing certificate failed Replacing key failed Certificate file does not exist Parsing file content failed Unsupported file format Saving shadow certificate failed Getting key of certificate Failed Saving shadow key failed Saving certificate file failed Importing certificate file failed Importing key failed Replacing certificate does not exist Invalid certificate path Unsupported operation

Possible Causes

For details, see reasons of failed to update a certificate.

Procedure

Invalid realm
Check whether the realm name is created or valid. For details about the PKI realm name specifications, see the pki realm command.
Shadow certificate does not exist
Check whether the shadow certificate exists. If not, import it first.
Refreshing certificate failed, Replacing key failed, Saving shadow certificate failed, Saving shadow key failed, Saving certificate file failed, or Importing key failed
Check whether the storage space on the device is full. If so, delete unnecessary files. If not, enable debugging of the PKI module in the user view and check debugging information to locate the fault, or contact technical support personnel.
Certificate file does not exist or Replacing certificate does not exist
Check whether the certificate file or certificate has been imported to the storage media of the device.
Parsing file content failed
Check whether file format is correct.
Unsupported file format
The device does not support this file format. Import a certificate file in the PEM format.
Getting key of certificate Failed
Check whether the key pair corresponding to the certificate has been imported.
Importing certificate file failed
Check whether the number of certificates reaches the maximum. If so, delete unused certificates.
Other reasons.
Contact technical support personnel.