Yes, Since you have two CA instances running on the same machine, you should select the relevant Administrator certificate. In your browser select the option "Ask me every time" in the question "When a server request my personal certificate". Then select the relevant certificate for the relevant CA instance. <div class="gmail_quote">2011/1/13 RD@WoSign <<a href="mailto:rd@wosign.com">rd@wosign.com</a>> <blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> Hi, Sorry, I've found a the way to solve the problem, Login in adminitrator console view the log, find that my choose's certificate is not Credential, if we choose another Credential certificate, the system is normal. thanks all, Best Regards, jeff <div class="gmail_quote">在 2011年1月13日上午10:31，RD@WoSign <<a href="mailto:rd@wosign.com" target="_blank">rd@wosign.com</a>>写道：<div><div></div><div class="h5"> <blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> hi,all, I have installed Dogtag Certificate System by pki_install_guide,include ca, subca, kra, ocsp,tks,ra and tps, configure is finished. i have problem in using the Dogtag Certificate Sytem, there many main requestes follow. note: my test domain is <a href="http://wotest.com" target="_blank">wotest.com</a> , operate platform is fedora 13 1. after pkicreate and configure,Enrollment Certificate by URL <a href="https://wotest.com:9444/ca/ee/ca/" target="_blank">https://wotest.com:9444/ca/ee/ca/</a> and Issue Certifite are OK, but i access subca Agent Service, can't fetch the subca's Certificate Enrollment submited by SSL END USER SERVICES(<a href="https://wotest.com:9544/ca/ee/ca" target="_blank">https://wotest.com:9544/ca/ee/ca</a>/). Subca's Agent Service Click <a href="https://woto.localdomain:9443/ca/agent/ca/frameListReq.html" target="_blank">List Requests</a> display : Problem Processing Your Request <table style="background-color: rgb(255, 255, 255); color: rgb(153, 153, 255);" cellpadding="0" cellspacing="0" width="100%" border="0"> <tbody><tr> <td> </td></tr></tbody></table>The Certificate Manager encountered an unexpected error while processing your request. The following is a detailed message of the error that occurred. Invalid Credential. Please consult your local administrator for further assistance. The Certificate System logs may provide further information. 2. if I restart fc13 and execute the "service pki-cad start " ,display: pki-ca (pid 3386) is running ... Unsecure Port = <a href="http://wotest.com:9180/ca/ee/ca" target="_blank">http://wotest.com:9180/ca/ee/ca</a> Secure Agent Port = <a href="https://wotest.com:9443/ca/agent/ca" target="_blank">https://wotest.com:9443/ca/agent/ca</a> Secure EE Port = <a href="https://wotest.com:9444/ca/ee/ca" target="_blank">https://wotest.com:9444/ca/ee/ca</a> Secure Admin Port = <a href="https://wotest.com:9445/ca/services" target="_blank">https://wotest.com:9445/ca/services</a> EE Client Auth Port = <a href="https://wotest.com:9446/ca/eeca/ca" target="_blank">https://wotest.com:9446/ca/eeca/ca</a> PKI Console Port = pkiconsole <a href="https://wotest.com:9445/ca" target="_blank">https://wotest.com:9445/ca</a> Tomcat Port = 9701 (for shutdown) PKI Instance Name: pki-ca PKI Subsystem Type: Root CA (Security Domain) Registered PKI Security Domain Information: ========================================================================== Name: wotest URL: <a href="https://wotest.com:9445" target="_blank">https://wotest.com:9445</a> ========================================================================== [root@woto jeff]# service pki-cad start pki-subca Starting pki-subca: [确定] pki-subca (pid 4341) is running ... Unsecure Port = <a href="http://wotest.com:9580/ca/ee/ca" target="_blank">http://wotest.com:9580/ca/ee/ca</a> Secure Agent Port = <a href="https://wotest.com:9543/ca/agent/ca" target="_blank">https://wotest.com:9543/ca/agent/ca</a> Secure EE Port = https:/<a href="http://wotest.com:9544/ca/ee/ca" target="_blank">wotest.com:9544/ca/ee/ca</a> Secure Admin Port = <a href="https://wotest.com:9545/ca/services" target="_blank">https://wotest.com:9545/ca/services</a> EE Client Auth Port = <a href="https://wotest.com:9546/ca/eeca/ca" target="_blank">https://wotest.com:9546/ca/eeca/ca</a> PKI Console Port = pkiconsole <a href="https://wotest.com:9545/ca" target="_blank">https://wotest.com:9545/ca</a> Tomcat Port = 9801 (for shutdown) PKI Instance Name: pki-subca PKI Subsystem Type: Subordinate CA Registered PKI Security Domain Information: ========================================================================== Name: wotest URL: <a href="https://wotest.com:9445" target="_blank">https://wotest.com:9445</a> ========================================================================== if i access Agent Services in CA or SUBCA, Click <a href="https://woto.localdomain:9443/ca/agent/ca/frameListReq.html" target="_blank">List Requests</a> display : Problem Processing Your Request <table style="background-color: rgb(255, 255, 255); color: rgb(153, 153, 255);" cellpadding="0" cellspacing="0" width="100%" border="0"> <tbody><tr> <td> </td></tr></tbody> </table> The Certificate Manager encountered an unexpected error while processing your request. The following is a detailed message of the error that occurred. Invalid Credential. Please consult your local administrator for further assistance. The Certificate System logs may provide further information. So, we can't go on, please tell me what's the problem, and how to do? thanks a lot. -- Best Regards, jeff </blockquote></div></div></div> _______________________________________________ Pki-devel mailing list <a href="mailto:Pki-devel@redhat.com">Pki-devel@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/pki-devel" target="_blank">https://www.redhat.com/mailman/listinfo/pki-devel</a> </blockquote></div> -- Best Regards, Harshana