ID Vault: certificates' issuers or the certificates' subjects don't match

HCL Domino Domino Forum
1

Hi

I got the error that I can figure out where.

There’s no single ID in ID Vault yet. All workstations get errors in log.nsf:

2010.04.15 00:32:13 ID ‘C:\Program Files\IBM\Lotus\Notes\Data\user.id’ failed to upload to vault ‘O=ID Vault’ on server ‘cn=dominosrv/o=organization’. ‘Firstname Lastname/organization’ made request. Error: Either the certificates’ issuers or the certificates’ subjects don’t match on remote server

2010.04.15 00:37:13 ID for ‘CN=Firstname Lastname/O=organization’ could not be authenticated in vault ‘O=ID Vault’ on server ‘cn=dominosrv/o=organization’. ‘Firstname Lastname/organization’ made request. Error: Entry not found in index on remote server

Server is logging the following errors:

2010.04.15 12:03:11 Unable to find ID for ‘Firstname2 Lastname2/organization’ in vault ‘O=ID Vault’. Error: Entry not found in index

2010.04.15 12:03:11 ID failed to authenticate in vault ‘O=ID Vault’. ‘Firstname2 Lastname2/organization’ (IP address 192.168.0.41:49860) made request. Error: Entry not found in index

2010.04.15 12:03:11 ID failed to upload to vault ‘O=ID Vault’. ‘Firstname2 Lastname2/organization’ (IP Address 192.168.0.41:49773) made request. Error: Either the certificates’ issuers or the certificates’ subjects don’t match

I checked ID vault again and again, ID vault has /organization configured. Administrators that may reset passwords also are registered in the same /organization.

What could be the problem?

Thanks in advance

Ramunas

2

Subject: ID Vault: certificates’ issuers or the certificates’ subjects don’t match

Per SPR LKIM8GRSJB this error can occur after you change your primary vault server using the ID Vault Manage tool. The work-around is to create a replica of the vault on the original vault server.

3

Subject: Only deleting and recreating ID vault with the same parammeters helped