SAP Knowledge Base Article - Preview

2382190 - Errors IPH6035 and IPH3017 after changing CAs


Upon changing the Certificate Authority configuration to use a new CA for enrollment, the following errors are seen in the logs:

  • IPH6035: PutMDM Message Signing Validation Failure. UDID:<UDID>
  • IPH3017: Mdm signing error msPkcs7Io.verifyDetachedSignature.x509: CryptographicException SignedCms.CheckSignature: The revocation function was unable to check revocation because the revocation server was offline.



  • SAP Afaria 7.0 SP5 and later
  • SAP Mobile Secure Cloud


SAP Afaria 7.0 ; SAP Afaria, cloud edition 1.0 ; SAP Afaria, cloud edition 1.5 ; SAP HANA Cloud Platform, mobile service for app and device management 1607 ; SAP Mobile Secure 2.0


cert, certificate, CRL, Certificate Revocation List, CA, certification authority, certifiction , KBA , MOB-AFA , Afaria , MOB-SEC , Mobile Secure Portfolio (Cloud) incl Afaria Cloud Edition , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.