Info:
When enrolling against a Symantec Managed PKI CA, the certificate stops at stage 700.
Applies To:
Director 8.0.1
Director 11 and up
Trust Protection Platform 14.1 and up
More Info:
There are several reasons why a Symantec Managed PKI certificate would stop at stage 700.
Is the Certificate an EV certificate?
Since moving to the VICE 2 API, Symantec does not allow the automatic approval of Extended Validation (EV) Certificates. Each EV Certificate renewal must be manually approved in the Symantec Customer Portal.
Once the request is approved on the Symantec Managed PKI for SSL Control Center, Trust Protection Platform will be able to retrieve the certificate.
Is Manual Approval set on the certificate profile?
On the Symantec Managed PKI for SSL Control Center, you can set the certificate profile not to automatically approve requests submitted through VICE 2 when you don’t want Automatic Approval.
Once the request is approved on the Symantec Managed PKI for SSL Control Center, Trust Protection Platform will be able to retrieve the certificate.
Is there a workflow applied at Stage 700?
If a workflow is set apply at stage 700, Trust Protection Platform will stop processing at Stage 700.
Once the request is approved in Trust Protection Platform, processing will carry on and the certificate be retrieved.
Be patient
If the certificate was not ready the first time Trust Protection Platform tried to retrieve the certificate, by default another attempt will be done every hour until it is ready and retrieved.
Comments