Installation guide

though the tokens contain Phone Home URLs.
235150 The TKS sub-system start and stop scripts currently do
not check that the package is installed before
attempting to execute.
236857 In the RA agent page, the RA attempts to retrieve
revocation information for a certificate that the agent
does not have the rights to see. T his is not an issue at
present and can be ignored.
237050 There can be numerous File does not exist errors in the
RA error logs. T he administrator can safely ignore
these error messages.
237056 On the agent interface of the RA, the List Requests
page displays the total number of certificate requests.
On the List Certificates page, the corresponding
information is missing. T his will be fixed in the next
release.
237250 There is currently no facility for canceling certificate
revocation. This will be added in the next release.
237251 There is currently no option to add comments to a
revocation request submitted through the RA. T his is
useful for agents if they are temporarily putting
certificates on hold. T his facility is currently only
provided in the CA. It will be added to the RA in the next
release.
237305 The CA subsystem in Certificate System does not
process SCEP requests that have been previously
submitted. T his can result in an error message similar
to the following:
1706.http-9080-Processor24 -
[20/Apr/2007:05:47:23 PDT] [20] [3] CEP
Enrollment: Enrollment failed: user used
duplicate transaction ID.
To avoid this situation, ensure
that the Cisco router
generates fresh sets of keys
for SCEP enrollments.
237353 If the user clicks a link in the agent interface too fast
and too many times, the server may return Broken pipe:
core_output_filter: writing data to the network and
terminate the SSL connection.
Re-authenticate to the agent
interface.
238039 The Subject Alt Name extension in certificates that are
issued using the caDirUserCert profile contain
unsubstituted variables, such as
$request.requestor_em ail$), if the profile request
does not contain values available for substitution.
238203 The T PS instance name is hard-coded in the CS.cfg.
Because the instance name is hard-coded, the T PS
looks for the configuration file in /var/lib/rhpki-
tps/conf/CS.cfg.
If you create an instance with a
name other than rhpki-tps,
modify the /var/lib/tps-
instance-name/cgi-
bin/sow/cfg.pl file to
remove the hard-coded
instance name.
8. Known Issues
29