Question:
I attempt to have the NotesDriverShim perform a Notes User rename operation using AdminP with the Domino Certificate Authority (CA) and the rename operation is not performed. At the Domino console, I see the following error: CA Process (OU=sales/O=novell): Error processing certificate request: Profile not authorized for requesting user.
Answer:
For Certificate Authority (CA) requests to be performed, the user requesting the operation (the Notes Driver user in this case) must be a Certificate Authority Administrator (CAA) or a Registration Administrator (RA) for the particular certificate being used to perform the user rename operation. This error can occur when the Notes Driver user is not a designated CAA or RA for the certificate of the organization (or OU) of the user being renamed.
To change (or verify) the CAA or RA entries of a particular certificate, use Domino Administrator and select the Configuration tab; on the Tools menu, expand the Certification menu, and select 'Modify Certifier'; in the Modify Certifier dialog click the 'Issued Certificate List ("ICL") database' button, then use the select button to navigate to (and open) the appropriate certifier (ICL database) within the ICL directory structure, then select OK to open the specific Certifier's dialog box. From this Certifier's dialog box, select the 'Add' button to add the necessary Notes users (the Notes Driver User in this case) as administrators, appropriately checking the CAA and/or RA boxes. Click OK to save these changes in the ICL database. From the Domino server console that hosts the CA, type 'tell ca refresh' for the changes to become effective.
