Keystore could not be generated for username 'NAME': ca.serialnumberoctetsize must be between 0 and 20 bytes for this serial number generator

[Nathanforet]

Hello,

I'm once again seeking for some help,
I'm trying to make a new request from my SubCA

And during this part I'm filling the name and password (I don't really know what to put here)

And I'm getting this error

What does it mean ?
I'm here if you need more informations.

Thanks.

[mike-agrenius-kushner]

Hi,

What have you set this to in your CA config? See screenshot:

Cheers,
Mike

[Nathanforet]

Oh yes you are right !
I thought I put it on 20 after confirming the CA by the RootCA, it was on -1.

Thank you for the answer !

I have a doubt on what to put in these fields, is it the password from the end entity profiles created before ?
For me this password is used to backup the CA if needed.
I have now this error

I've tried to make an end entity profile and put it int the field, it doesn't change the error.

Thanks Mike.

[mike-agrenius-kushner]

That error message says that there's a constraint in the EEP that isn't fulfilled, i.e. something set to Required or that doesn't match up to a regex. Check the logs, you should have a more detailed explanation there.

Cheers,
Mike

[Nathanforet]

I needed to turn off this option in the SubCA Certificate:

In the Manage Certification Authorities section

Thanks again Mike !

[mike-agrenius-kushner]

Very welcome!