Unable to delete certificate request (error -13009)

Options
scf
scf image  Freshman Member
First Comment Friend Collector
edited June 7 in Wireless

I have an NWA130BE running in standalone mode. While replacing an expired certificate, I had experimented with creating a CSR. Fortunately, I have the new certificate in place and working.

However, curiosity had gotten the best of me. I now have a request that I cannot delete. When I try to remove it, an error is returned:

CLI Number: 0
Error Number: -13009
Error Message: 'PKI certificate does not exist.'

I have attempted to sign the CSR and import it to satisfy the request, but it never associates it. It complains with a -13008 error and 'PKI key does not exist'. It appears that the device thinks there should be a certificate for it already and will not allow it to be deleted if it does not exist.

Without wiping the device, is there a way to delete the CSR through the UI or CLI?

All Replies

  • Zyxel_Tina
    Zyxel_Tina image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments
    Options

    Hi @scf,

    To better understand the situation and investigate further, could you please assist us with the following?

    1. A screenshot or a brief video recording demonstrating the issue you're encountering
    2. Provide the device's diagnostic info file via private message by clicking my profile > Message

    Thank you for your cooperation!

    Zyxel Tina

  • Zyxel_Tina
    Zyxel_Tina image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments
    Options

    Hi @scf,

    Thank you for your patience!

    After checking, you can use the following commands to check the certificate file information and delete the file. Once applied, it will disappear from the Web GUI as well.

    Router> show ca category local

    Router> configure terminal

    Router(config)# no ca category local <certificate_name>

    Zyxel Tina

  • scf
    scf image  Freshman Member
    First Comment Friend Collector
    Options

    Hi Tina,

    Sorry for the wait. I did not know you had responded.

    Unfortunately, using the CLI did not help. It has the same error number:

    retval = -13009

    ERROR: PKI certificate does not exist.

  • Zyxel_Tina
    Zyxel_Tina image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments
    Options

    Hi @scf,

    Thank you for the update.

    As a new firmware version has recently been released, could you please first confirm whether your NWA130BE is running the latest firmware, V7.40(ACIL.1)C0?

    In addition, please provide the exact CLI command you used and the steps you followed when the error occurred. If possible, please also share a screenshot of the error message and any other relevant information so that we can further investigate the issue.

    Zyxel Tina

Categories

Wireless Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）