-1240 0xFFFFFB28   PKI E PARSE CERTIFICATE

Source:  Novell Certificate Server

Explanation:  Novell Certificate Server was unable to parse a certificate that has been stored or is being stored.

Possible Cause:  The user attempted to store a certificate or a certificate chain with an invalid encoding into Server Certificate object. The certificate or certificate chain obtained from the Certificate Authority is invalid.

Action:  Perform the following operations:

• Contact the Certificate Authority that issued the server certificate to obtain the Certificate Authority's certificate.
• Using ConsoleOne, view the Server Certificate object. Click Import.
• Import the Certificate Authority's certificate as the trusted root.
• Import the server's certificate as the object certificate.

If the problem persists, contact the Certificate Authority.

Possible Cause:  Pki.nlm is not compatible with the version of the Novell Certificate Server snap-in used in ConsoleOne.

Action:  Complete one or more of the following solutions in the order listed until the error is resolved:

• Use compatible versions of the Novell Certificate Server snap-in for ConsoleOne and pki.nlm. See Upgrading the Version of Novell Certificate Server.
• Upgrade to the latest version of Novell Certificate Server. See Upgrading the Version of Novell Certificate Server.

Possible Cause:  The object that the certificate has been stored in is corrupted.

Action:  Complete one or more of the following solutions in the order listed until the error is resolved:

• Restore the eDirectory or NDS partition that the corrupted object resides in from backup.
• If the certificate is in a User object, delete the certificate and create a new one.
• If the certificate is in a Server Certificate object, delete the Server Certificate object and create a new one.
• If the certificate is in the Organizational Certificate Authority object, delete the Organizational Certificate Authority object and create a new one.

WARNING:  Use care when deleting the Organizational Certificate Authority. After the Organizational Certificate Authority object is deleted, all User and Server Certificates signed by the Certificate Authority will cease to be valid and should be deleted. After the new Organizational Certificate Authority has been created, certificates for user and servers can be re-created as needed.

WARNING:  Use care when deleting User Certificates. Deleting a User Certificate also deletes the user's private key. Without the private key, data encrypted using the public key in the certificate (for example, e-mail) cannot be decrypted.