Error KMA_D9006 — User Certificate Installation Failed

Environment

• Knox Manage

Overview

On devices configured with the same Knox Manage profile, you may encounter an issue where some of the devices can’t successfully install the user certificate:

[ERROR] [KMA_D9006]
User Certificate Installation Failed
Issued user certificates cannot be installed on the device. Contact your administrator to check your certificate profile or settings.

Cause

This error occurs when the device has a Bouncy Castle library version incompatible with the Knox Manage agent. The Knox Manage team is working to resolve this compatibility issue in a future release.

Workaround

As a temporary workaround, you can convert the certificate with OpenSSL and use the -legacy flag:

openssl pkcs12 -in certificate.p12 -nocerts -nodes -out privateKey.pem -legacy

For more information on how to use OpenSSL, see Convert legacy .p12 .pfx files to support OpenSSL 3.