When submitting a certificate for renewal, TPP will show a certificate renewal lifecycle stage 500 message posting the CSR to the CA.
With the TPP 20.3 release, the DigiCert driver now supports divisions (containers). When configuring a Digicert Cert Central CA Template, after validating the API key credential, you may select a division brought back from your Digicert account.
Digicert will throw an access denied message when a Division is configured on the CA Template and it is misconfigured or deactivated in your Digicert portal.
Either select an activated division in the CA template or log into your Digicert portal and activate the division that is configured in your CA template.