I have a tree that has a NW6.5/Edir 8.7.3.7 Master and one RW on a 6.5
8.3.7.3 box. I did this last weekend with the help of Novell. They told
me to upgrade the other 5.1sp7/DS7.62 boxes this weekend to 6.5/Edir. I
am on my first one and the Health Check is fine except this:

---------------------------------------------------------------------------
PKIDiag 2.70 -- (compiled Dec 09 2003 19:46:03).
(Check the end of the log for the last repair results)
Current Time: Fri Mar 31 21:08:36 2006
User logged-in as: Admin.KC.
Fixing mode
Rename and create mode
Always Re-key

--> Server Name = 'BOB'
---------------------------------------------------------------------------

Step 1 Verifying the Server's link to the SAS Service Object.
Server 'BOB.KC' points to SAS Service object 'SAS Service - BOB.KC'
Step 1 succeeded.

Step 2 Verifying the SAS Service Object
SAS Service object 'SAS Service - BOB.KC' is backlinked to
server 'BOB.KC'.
Step 2 succeeded.

Step 3 Verifying the links to the KMOs
Reading the links for SAS Service object 'SAS Service - BOB.KC'.
--->KMO Old1 SSL CertificateIP - BOB.KC is linked.
--->KMO Old1 SSL CertificateDNS - BOB.KC is linked.
--->KMO Old2 SSL CertificateIP - BOB.KC is linked.
--->KMO Old2 SSL CertificateDNS - BOB.KC is linked.
--->KMO SSL CertificateIP - BOB.KC is linked.
--->KMO SSL CertificateDNS - BOB.KC is linked.
Step 3 succeeded.

Step 4 Verifying the KMOs
---> Testing KMO 'SSL CertificateDNS - BOB.KC'.
Rights check -- OK.
Back link -- OK.
Private Key -- OK.

---> Testing KMO 'SSL CertificateIP - BOB.KC'.
Rights check -- OK.
Back link -- OK.
Private Key -- OK.

---> Testing KMO 'Old2 SSL CertificateDNS - BOB.KC'.
Rights check -- OK.
Back link -- OK.
Private Key -- OK.

---> Testing KMO 'Old2 SSL CertificateIP - BOB.KC'.
Rights check -- OK.
Back link -- OK.
Private Key -- OK.

---> Testing KMO 'Old1 SSL CertificateDNS - BOB.KC'.
Rights check -- OK.
Back link -- OK.
Private Key -- OK.

---> Testing KMO 'Old1 SSL CertificateIP - BOB.KC'.
Rights check -- OK.
Back link -- OK.
Private Key -- OK.

---> Testing KMO 'DNS AG 192\.168\.1\.223 - BURNS.KC'.
Rights check -- OK.
Back link -- Belongs to a different server -- Ignoring this KMO.


---> Testing KMO 'DNS AG BURNS - BURNS.KC'.
Rights check -- OK.
Back link -- Belongs to a different server -- Ignoring this KMO.


---> Testing KMO 'IP AG 192\.168\.1\.223 - BURNS.KC'.
Rights check -- OK.
Back link -- Belongs to a different server -- Ignoring this KMO.


---> Testing KMO 'SSL CertificateDNS - BURNS.KC'.
Rights check -- OK.
Back link -- Belongs to a different server -- Ignoring this KMO.


---> Testing KMO 'SSL CertificateIP - BURNS.KC'.
Rights check -- OK.
Back link -- Belongs to a different server -- Ignoring this KMO.

Step 4 succeeded.

Step 5 Re-verifying the links to the KMOs
Reading the links for SAS Service object 'SAS Service - BOB.KC'.
KMO 'Old1 SSL CertificateIP - BOB.KC' is linked.
KMO 'Old1 SSL CertificateDNS - BOB.KC' is linked.
KMO 'Old2 SSL CertificateIP - BOB.KC' is linked.
KMO 'Old2 SSL CertificateDNS - BOB.KC' is linked.
KMO 'SSL CertificateIP - BOB.KC' is linked.
KMO 'SSL CertificateDNS - BOB.KC' is linked.
Step 5 succeeded.

Step 6 Creating IP and DNS Certificates if necessary.
--> Number of Server IP addresses = 3
--> The default IP address is: 192.168.1.7
ERROR -742600340. The KMO SSL CertificateIP exists, but I can't decode it.
PROBLEM: Need to rename 'SSL CertificateIP - BOB.KC'.
Fix: Successfully changed 'SSL CertificateIP - BOB.KC' to 'Old3 SSL
CertificateIP - BOB.KC'.
FIXING: Creating SSL CertificateIP (192.168.1.7)
Pausing for 5 seconds because of error -1263
ERROR -1263 creating SSL CertificateIP.
--> Number of Server DNS names for the IP address 192.168.1.7 = 1
--> The server's default DNS name is:
BOB
ERROR -1240. The KMO SSL CertificateDNS exists, but we can't decode it.
PROBLEM: Need to rename 'SSL CertificateDNS - BOB.KC'.
Fix: Successfully changed 'SSL CertificateDNS - BOB.KC' to 'Old3 SSL
CertificateDNS - BOB.KC'.
FIXING: Creating SSL CertificateDNS (BOB)
Pausing for 5 seconds because of error -1263
ERROR -1263 creating SSL CertificateDNS.
Step 6 failed -1263.


Note: Occasionally multiple problems will be solved with a single fix.

Fixable problems found: 0
Problems fixed: 0
Un-fixable problems found: 0

Can I continue with the upgrade and will 6.5 redo this anyway? My whole
weekend install plan seems to be going downhill.