TSS1628E - Cannot REMOVE Certificate has been GENREQed

Products

• Top Secret

Issue/Introduction

When trying to remove a digital certificate the following error messages are received:

TSS1628E - Cannot REMOVE Certificate has been GENREQed
TSS0301I  REMOVE   FUNCTION FAILED, RETURN CODE =  4     

 

Cause

This message is issued to inform sites that they are attempting to remove a certificate that was previously the source of a GENREQ command.
If the certificate is deleted, the private key associated with the GENREQed certificate is no longer available. 

Resolution

If the certificate has been sent out to be signed and then added back to the owning acid using a slightly different name, then the keys are paired. There is now a new signed version of the certificate with the private key.  The GENREQed certificate can now be removed using the FORCE command.

For example:
      TSS REMOVE(acid) DIGICERT(certificate) FORCE