Error1227

From CoolSolutionsWiki

-my other wikis

error 1227 attempting to import a signed certificate from Verisign.

  1. Failed to store the public key certificate into the object _____ returned error code is -1,227.
  2. A link within the certificate chain in a Server Certificate Object (also known as the Key Material Object) is missing or is invalid

FIX

  1. Verisign has many types of certificates -- please understand the type you are getting
    1. Installation Instructions for SSL Certificates
      1. https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=AR212
    2. Intermediate CA Certificates
      1. http://www.verisign.com/support/verisign-intermediate-ca/secure-site-intermediate/index.html
    3. How to download the VeriSign Root CA and Intermediate Certificate Authority (CA) Certificates?
      1. https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=SO4785&pmv=print&actp=PRINT
    4. verify installed certificate
      1. https://knowledge.verisign.com/support/ssl-certificates-support/index?page=certchecker
  2. We get this 1227 error because we don't have the certificate from verisign's CA, If this is an extended validation certificate from verisign--then we use the intermediate certificate as THE ROOT certificate as we import the signed certificate from verisign.

process

  1. do the certificate signing request (create the KMO and say it's from an external CA - send that file to verisign - see tids and their website for details
    1. Fix1.JPG
  2. Fix2.JPG
  3. Fix3.jpg
  4. Fix4.jpg
  5. Fix5.jpg
  6. Fix6.jpg
  7. Fix7.jpg
  8. NOTE: you may need to "true up" the subject line to match what verisign sends back (to do this - change the consoleone option so you can modify the raw attribute and make the c=US.etc.etc subject match

helpful screen shots

Fix11.jpg


take the intermediate cert and paste it into a file to use as the root certificate Fix22.jpg