Return
-
Title
How to troubleshoot Certificate Autoenrollment failures from vascert. How to gather vascert debug. -
Description
How to troubleshoot Certificate Autoenrollment failures from vascert -
Resolution
To enable debug logging:1 - As root, run the following command to configure debug logging for all users:/opt/quest/bin/vascert configure debug2. To configure debug logging for a specific user, log in as that user and run the same command.NOTE: Enabling debug logging causes the vascert command to write debug messages to a file in addition to stdout. Even after you enable debug logging, you must set the debug level using the -d command line option when running vascert commands manually.3. When you are finished debugging, run the following command as root to turn off debug logging for all users. One Identity recommends that you turn off debug logging to improve performance and conserve disk space./opt/quest/bin/vascert unconfigure debug4. To turn off debug logging for a specific user, log in as that user and run the same command