Updating certificate on NetScaler failed with error

Updating certificate on NetScaler failed with error

book

Article ID: CTX579185

calendar_today

Updated On:

Description

The following error occurs when updating a certificate on the NetScaler appliance. 

ERROR: Certificate is referenced by a CRL, OCSP responder, vserver, service, monitor, SSL profile, CA Cert Group, another certificate, or a policy expression using XML_ENCRYPT() or XML_DECR

Resolution

  1. Unbind the certificate key-pair from global bind point.
  2. Retry updating the certificate. 

Problem Cause

Sep 6 11:02:39 <local0.debug> C [478]: nslocal_fileRead(): Data secured for: xxxxx-key-pair
Sep  6 11:02:39 <local0.info>   09/06/2023:02:02:39 GMT  0-PPE-0 : default GUI CMD_EXECUTED 232 0 :  User nsroot - ADM_User NONE - Remote_ip   - Command "update ssl certKey xxxx-key-pair -cert saaa.cert_2023.pem -key bbb.key_2023.pem -inform PEM" - Status "ERROR: Certificate is referenced by a CRL, OCSP responder, vserver, service, monitor, SSL profile, CA Cert Group, another certificate, or a policy expression using XML_ENCRYPT() or XML_DECR"

 

 below configuration depicted that the certificate key-pair is associated with global bind point. 

bind vpn global -certkeyName xxxx-key-pair