NotesDriverShim: Solving "Error processing certificate request: Profile not authorized for requesting user"

Absent Member.
Absent Member.
0 0 4,745
0 Likes

Question:



I attempt to have the NotesDriverShim perform a Notes User rename operation using AdminP with the Domino Certificate Authority (CA) and the rename operation is not performed. At the Domino console, I see the following error: CA Process (OU=sales/O=novell): Error processing certificate request: Profile not authorized for requesting user.

Answer:



For Certificate Authority (CA) requests to be performed, the user requesting the operation (the Notes Driver user in this case) must be a Certificate Authority Administrator (CAA) or a Registration Administrator (RA) for the particular certificate being used to perform the user rename operation. This error can occur when the Notes Driver user is not a designated CAA or RA for the certificate of the organization (or OU) of the user being renamed.

To change (or verify) the CAA or RA entries of a particular certificate, use Domino Administrator and select the Configuration tab; on the Tools menu, expand the Certification menu, and select 'Modify Certifier'; in the Modify Certifier dialog click the 'Issued Certificate List ("ICL") database' button, then use the select button to navigate to (and open) the appropriate certifier (ICL database) within the ICL directory structure, then select OK to open the specific Certifier's dialog box. From this Certifier's dialog box, select the 'Add' button to add the necessary Notes users (the Notes Driver User in this case) as administrators, appropriately checking the CAA and/or RA boxes. Click OK to save these changes in the ICL database. From the Domino server console that hosts the CA, type 'tell ca refresh' for the changes to become effective.
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.