If an Error Is Displayed in the Certificate Issuance Request Status

If a certificate is not issued, an error is displayed in the certificate issuance request status. Select the message from the list below, and check how to troubleshoot the problem.
If the problem persists even after trying the troubleshooting methods, contact the SCEP server administrator.

Key and Certificate Registration Limit Error

The maximum number of keys and certificates that can be registered to the machine has been reached.
Delete unused keys and certificates.

Communication Error (SCEP ERROR - Fail Info 0: Unrecognized or Unsupported Algorithm)

The algorithm of the certificate is unknown or is not supported.

Set the [Signature Algorithm] and [Key Length (bit)] of the Certificate Issuance Request Correctly.
Generating a Key and Obtaining and Registering a Certificate from an SCEP Server

Communication Error (SCEP ERROR - Fail Info 1: CMS Message Integrity Verification Failure)

Certificate integrity check (CMS message signature verification) failed.
Request Certificate Issuance Again.
Generating a Key and Obtaining and Registering a Certificate from an SCEP Server

Communication Error (SCEP ERROR - Fail Info 2: Forbidden or Unsupported Transaction)

Communication with the SCEP server is not allowed or supported.
Set the Communication Settings of the SCEP Server Correctly.
Generating a Key and Obtaining and Registering a Certificate from an SCEP Server

Communication Error (SCEP ERROR - Fail Info 3: Excessive Time Difference Between CMS signingTime and System Time)

The time of the signingTime attribute in the authenticated attribute of CMS (PKCS#7) does not match the time of the SCEP server.
Check the Date and Time Settings on the Machine.
If the settings are not correct, set the time zone, and then set the current date and time.
Request certificate issuance again.
Setting the Date and Time
Generating a Key and Obtaining and Registering a Certificate from an SCEP Server

Communication Error (SCEP ERROR - Fail Info 4: No Certificate Identified That Matches Provided Criteria)

Unable to identify if the certificate matches the standard.
Contact the SCEP Server Administrator.

Communication Error (TCP ERROR)

Connection to SCEP server failed or timed out.
Set the Communication Settings of the SCEP Server Correctly.
Generating a Key and Obtaining and Registering a Certificate from an SCEP Server

Communication Error (HTTP ERROR <HTTP status code>)

HTTP error occurred.
Set the Communication Settings of the SCEP Server Correctly.
Generating a Key and Obtaining and Registering a Certificate from an SCEP Server

Deferred

SCEP server returned a deferred status.
Wait a Moment, and Request Certificate Issuance.
Generating a Key and Obtaining and Registering a Certificate from an SCEP Server
84CS-0U4