Source: Novell Certificate Server
Explanation: A key pair already exists for the Organizational Certificate Authority.
Possible Cause: An Organizational Certificate Authority has already been created.
Action: No action is necessary if the existing Organizational Certificate Authority is still valid. If it is not, perform all of the following operations:
WARNING: Use care when deleting the Organizational Certificate Authority. After the Organizational Certificate Authority object is deleted, all User and Server Certificates signed by the Certificate Authority will cease to be valid and should be deleted. After the new Organizational Certificate Authority has been created, certificates for user and servers can be re-created as needed.
WARNING: Use care when deleting User Certificates. Deleting a User Certificate also deletes the user's private key. Without the private key, data encrypted using the public key in the certificate (for example., e-mail) cannot be decrypted.
Possible Cause: The Organizational Certificate Authority object has been deleted, but eDirectory or NDS has not yet synchronized.
Action: The partition that the Organizational Certificate Authority's object resides in must be synchronized to all servers that hold a replica before a new Organizational Certificate Authority can be created. Normally, synchronization will occur automatically, but it may take some time. If synchronization does not occur within a reasonable timeframe, run dsrepair.nlm on the servers in the replica ring.