Compute
Elastic Cloud Server
Huawei Cloud Flexus
Bare Metal Server
Auto Scaling
Image Management Service
Dedicated Host
FunctionGraph
Cloud Phone Host
Huawei Cloud EulerOS
Networking
Virtual Private Cloud
Elastic IP
Elastic Load Balance
NAT Gateway
Direct Connect
Virtual Private Network
VPC Endpoint
Cloud Connect
Enterprise Router
Enterprise Switch
Global Accelerator
Management & Governance
Cloud Eye
Identity and Access Management
Cloud Trace Service
Resource Formation Service
Tag Management Service
Log Tank Service
Config
OneAccess
Resource Access Manager
Simple Message Notification
Application Performance Management
Application Operations Management
Organizations
Optimization Advisor
IAM Identity Center
Cloud Operations Center
Resource Governance Center
Migration
Server Migration Service
Object Storage Migration Service
Cloud Data Migration
Migration Center
Cloud Ecosystem
KooGallery
Partner Center
User Support
My Account
Billing Center
Cost Center
Resource Center
Enterprise Management
Service Tickets
HUAWEI CLOUD (International) FAQs
ICP Filing
Support Plans
My Credentials
Customer Operation Capabilities
Partner Support Plans
Professional Services
Analytics
MapReduce Service
Data Lake Insight
CloudTable Service
Cloud Search Service
Data Lake Visualization
Data Ingestion Service
GaussDB(DWS)
DataArts Studio
Data Lake Factory
DataArts Lake Formation
IoT
IoT Device Access
Others
Product Pricing Details
System Permissions
Console Quick Start
Common FAQs
Instructions for Associating with a HUAWEI CLOUD Partner
Message Center
Security & Compliance
Security Technologies and Applications
Web Application Firewall
Host Security Service
Cloud Firewall
SecMaster
Anti-DDoS Service
Data Encryption Workshop
Database Security Service
Cloud Bastion Host
Data Security Center
Cloud Certificate Manager
Edge Security
Situation Awareness
Managed Threat Detection
Blockchain
Blockchain Service
Web3 Node Engine Service
Media Services
Media Processing Center
Video On Demand
Live
SparkRTC
MetaStudio
Storage
Object Storage Service
Elastic Volume Service
Cloud Backup and Recovery
Storage Disaster Recovery Service
Scalable File Service Turbo
Scalable File Service
Volume Backup Service
Cloud Server Backup Service
Data Express Service
Dedicated Distributed Storage Service
Containers
Cloud Container Engine
Software Repository for Container
Application Service Mesh
Ubiquitous Cloud Native Service
Cloud Container Instance
Databases
Relational Database Service
Document Database Service
Data Admin Service
Data Replication Service
GeminiDB
GaussDB
Distributed Database Middleware
Database and Application Migration UGO
TaurusDB
Middleware
Distributed Cache Service
API Gateway
Distributed Message Service for Kafka
Distributed Message Service for RabbitMQ
Distributed Message Service for RocketMQ
Cloud Service Engine
Multi-Site High Availability Service
EventGrid
Dedicated Cloud
Dedicated Computing Cluster
Business Applications
Workspace
ROMA Connect
Message & SMS
Domain Name Service
Edge Data Center Management
Meeting
AI
Face Recognition Service
Graph Engine Service
Content Moderation
Image Recognition
Optical Character Recognition
ModelArts
ImageSearch
Conversational Bot Service
Speech Interaction Service
Huawei HiLens
Video Intelligent Analysis Service
Developer Tools
SDK Developer Guide
API Request Signing Guide
Terraform
Koo Command Line Interface
Content Delivery & Edge Computing
Content Delivery Network
Intelligent EdgeFabric
CloudPond
Intelligent EdgeCloud
Solutions
SAP Cloud
High Performance Computing
Developer Services
ServiceStage
CodeArts
CodeArts PerfTest
CodeArts Req
CodeArts Pipeline
CodeArts Build
CodeArts Deploy
CodeArts Artifact
CodeArts TestPlan
CodeArts Check
CodeArts Repo
Cloud Application Engine
MacroVerse aPaaS
KooMessage
KooPhone
KooDrive
On this page

Show all

PCA Error Codes

Updated on 2022-12-22 GMT+08:00

Status Code

Error Codes

Error Message

Description

Solution

400

PCA.00020001

Incorrect parameter.

Incorrect parameter.

Please confirm whether the input parameters are correct.

400

PCA.00020101

Incorrect certificate distinguished name.

Incorrect certificate distinguished name.

Please confirm whether all fields in the parameter distinguished_name meet the requirements.

400

PCA.00020102

Invalid key algorithm. Only RSA2048, RSA4096, EC256, and EC384 are supported.

Invalid key algorithm. Only RSA2048, RSA4096, EC256, and EC384 are supported.

Please confirm whether the key algorithm input is correct.

400

PCA.00020103

Invalid signature hash algorithm. Only SHA256, SHA384, and SHA512 are supported.

Invalid signature hash algorithm. Only SHA256, SHA384, and SHA512 are supported.

Please confirm whether the entered signature hash algorithm is correct.

400

PCA.00020109

Invalid validity period type or value. Only year, month, or day supported.

Invalid validity period type or value. Only year, month, or day supported.

Please confirm whether the validity period type and value entered are correct.

400

PCA.00020110

Incorrect domain name.

Incorrect domain name.

Please confirm that the length of the entered domain name is in the range of [1,64] and conforms to the domain name rules.

400

PCA.00020111

Invalid IP. Enter an IPv4 address.

Invalid IP. Enter an IPv4 address.

Please confirm that the IP address conforms to IPv4 rules.

400

PCA.00020112

Invalid alternative name type of the certificate subject. Enter an IP or DNS.

Invalid alternative name type of the certificate subject. Enter an IP or DNS.

Please confirm that the type is IP or DNS.

400

PCA.00020201

Invalid CA ID. Valid CA IDs use a hexadecimal xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx format.

Invalid CA ID. Valid CA IDs use a hexadecimal xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx format.

Please enter the correct CA certificate ID.

400

PCA.00020202

Invalid CA type. Only root CA and subordinate CA are supported.

Invalid CA type. Only root CA and subordinate CA are supported.

Invalid CA type. Only root CA and subordinate CA are supported.

400

PCA.00020203

Invalid CA path length. The value range is [0, 6].

Invalid CA path length. The value range is [0, 6].

Please confirm whether the length of the entered CA path is correct. The value range of the CA path is [0,6].

400

PCA.00020204

Invalid CRL configuration.

Invalid CRL configuration.

Please check whether the entered certificate revocation list configuration is correct, including the OBS bucket name, CRL file name and the value range of the update cycle [7,30].

400

PCA.00020301

Invalid certificate ID. Valid certificate IDs use a hexadecimal xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx format.

Invalid certificate ID. Valid certificate IDs use a hexadecimal xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx format.

Please enter the correct certificate ID.

400

PCA.00020401

Incorrect certificate signature request.

Incorrect certificate signature request.

Please check that the certificate signing request is correct.

400

PCA.00020402

Incorrect certificate. Please contact technical support.

Incorrect certificate. Please contact technical support.

Please contact technical support.

400

PCA.00020403

Incorrect certificate chain.

Incorrect certificate chain.

Please confirm that the certificate chain entered meets the requirements:

  1. The format should be correct. When requesting through API, you need to use " " or "\r " instead of line feed;
  2. The certificate chain should be complete. Some intermediate CA certificates cannot be missing. The order is: intermediate CA >... > Root ca.

400

PCA.00020404

Invalid status. The status can only be Pending activation, Activated, Disabled, Pending deletion, or Expired.

Invalid status. The current support status is PENDING, ACTIVED, DISABLED, DELETED, and EXPIRED.

Please enter a valid status value. The currently supported status values are: PENDING, ACTIVED, DISABLED, DELETED, EXPIRED.

401

PCA.00000101

Access Denied. No permissions granted for this OBT.

Access Denied. No permissions granted for this OBT.

Please apply for public beta permission.

401

PCA.00010001

Incorrect X-Auth-Token in the request header.

Incorrect X-Auth-Token in the request header.

Please check:

  1. Check whether the token is obtained according to the interface provided by the Identity and Access Management(IAM);
  2. Check whether the token has expired. If the problem is not solved after checking the above conditions, please contact technical support.

401

PCA.00010002

Account frozen. Please contact technical support.

Account frozen. Please contact technical support.

Please contact technical support.

401

PCA.00010003

Access denied. Real-name authentication failed or account in arrears.

Access denied. Real-name authentication failed or account in arrears.

Please confirm whether the account has been authenticated by real name and whether it is in arrears. If it is still not resolved, please contact technical support.

401

PCA.00010004

Insufficient permissions. Contact administrator.

Insufficient permissions. Contact administrator.

Please contact the account administrator to confirm the account permissions. If the problem is still not resolved, please contact technical support.

403

PCA.00000006

Obtaining OBS buckets failed. Please contact technical support.

Obtaining OBS buckets failed. Please contact technical support.

Please contact technical support.

403

PCA.00030001

CA or certificate quantity exceeds quota.

CA or certificate quantity exceeds quota.

Please check whether the number of CAs that have been created or the number of certificates that have been applied for has reached the maximum value. If you need to increase the quota, please contact technical support.

403

PCA.00030201

Operation not allowed in the current status.

Operation not allowed in the current status.

There are restrictions on the operations that the CA or certificate is allowed to perform in different states, please check the conditions of the operations:

  1. Disable CA: CA status must be in "ACTIVED" or "EXPIRED" status;
  2. Enable CA: CA status must be in "DISABLED" status;
  3. Delete CA: CA status must be in "PENDING" or "DISABLED" status;
  4. Restore CA: CA status needs to be in "DELETED" status;
  5. Export the CSR of the CA: the CA status needs to be in the "PENDING" state;
  6. Export CA certificate: CA status needs to be in "ACTIVED" or "EXPIRED" status;
  7. Activate CA: The CA status needs to be in the "PENDING" state;
  8. Applying for a certificate: The issuing CA status needs to be in the "ACTIVED" status;
  9. Export certificate: The certificate status needs to be in the "ISSUED" status. If the problem is not resolved after checking the operating conditions, please contact technical support.

403

PCA.00030202

CA or certificate frozen. Contact administrator.

CA or certificate frozen. Contact administrator.

Please contact technical support.

403

PCA.00030301

Certificate public key and private key does not match.

Certificate public key and private key does not match.

If this error message appears when importing a CA certificate, please check whether the CSR of the generated certificate is derived from the CA.

404

PCA.00030102

CA or certificate is not found.

CA or certificate is not found.

Please confirm that the CA or certificate already exists.

404

PCA.00030103

Issuer CA is not found

Issuer CA is not found

Please confirm that the specified issuing CA has been created and the status is "ACTIVED".

500

PCA.00000001

Unknown error. Please contact technical support.

Unknown error. Please contact technical support.

Please contact technical support.

500

PCA.00000002

Parameter processing failed. Please contact technical support.

Parameter processing failed. Please contact technical support.

Please contact technical support.

500

PCA.00000003

Certificate processing failed. Please contact technical support.

Certificate processing failed. Please contact technical support.

Please contact technical support.

500

PCA.00000004

Key processing failed. Please contact technical support.

Key processing failed. Please contact technical support.

Please contact technical support.

500

PCA.00000005

Authentication failed. Please contact technical support.

Authentication failed. Please contact technical support.

Please contact technical support.

We use cookies to improve our site and your experience. By continuing to browse our site you accept our cookie policy. Find out more

Feedback

Feedback

Feedback

0/500

Selected Content

Submit selected content with the feedback