TSS0940I Duplicate Certificate Detected But Not Duplicate

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

-The Top Secret command CHKCERT executed against the DSN containing the digital certificate shows that it is unknown. 

-Nevertheless, when we try to add that digital certificate to Top Secret, we receive the following message: TSS0940I DUPLICATE CERTIFICATE DETECTED along with its serial number.

-Going further the SAFCRRPT report also shows that this digital certificate is unknown. 

-This is occurring when we ADD and REMOVE the same digital certificate many times.

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

-Depending on the amount of ADD/REMOVE rate, it might happen that the Top Secret in core tables are out of synchronization. 

-Issue the TSS MODI SYNCH to rebuild the in core tables then the digital certificate can be added back to Top Secret.

Additional Information

SYNCH—Synchronize Tables