No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


AR Router Troubleshooting Guide

This Product Documentation provides guidance for maintaining AR Enterprise Router, covering common information collection and fault diagnostic commands, typical fault troubleshooting guide, and troubleshooting.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Failed to Obtain a Local Certificate

Failed to Obtain a Local Certificate

Common Causes

This fault is commonly caused by one of the following:

  • A fault occurs on the network connection, for example, the network cable is broken or not properly connected.
  • The CA certificate is not given a trusted name.
  • The enrollment mode (CA or RA) is incorrect.
  • The fingerprint for the CA certificate is configured incorrectly.
  • The RA server URL is not correct or not configured.
  • No RA server is configured for the certificate enrollment.
  • The device system clock does not synchronize with the CA clock.
  • Some mandatory parameters are not configured on the entity.

Troubleshooting Flowchart

Figure 22-15 shows how to troubleshooting flowchart.

Figure 22-15  Troubleshooting flowchart for a failure to obtain a local certificate

Troubleshooting Procedure


  1. Check whether the CA certificate can be obtained.

    If the CA certificate cannot be obtained, check the failure cause.

    If the CA certificate can be obtained, go to step 2.

  2. Check whether entity attributes are configured correctly.

    Check whether the mandatory parameters are configured and the entity name is the same as configured in the domain.

    If the fault persists, go to step 3.

  3. Check the authority in charge of certificate enrollment.

    Check whether RA or CA allows the user to enroll a CA certificate.

    If the fault persists, go to step 4.

  4. Collect the following information and contact technical support personnel.

    • Results of the preceding troubleshooting procedure
    • Configuration files, log files, and alarm files of the device

Updated: 2019-05-10

Document ID: EDOC1000079719

Views: 448239

Downloads: 4305

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next