Problem

Unable to delete a certificate due to record corruption in the database :

C:\axway\cft\runtime>PKIUTIL PKICER ID=Certificate_id, ITYPE=USER, ROOTCID='ROOT_ID', MODE=DELETE

PKIU20I

PKIU20I PKI

PKIU20I Version 3.10.2409 (9bdfa7290d)

PKIU20I Copyright (c) 2024 Axway

PKIU20I ====> Starting Session on 2025/08/14 Time is 14:51:11

PKIU20I

PKIU26E PKICER _ Error ( No record found {15011/0} () )

PKIU00I PKICER _ Failed (ID=Certificate_id,ITYPE=USER,ROOTC

PKIU00I ID='ROOT_ID',MODE=DELETE)

PKIU20I Number of Command(s) 1

PKIU20I Number of error(s) 1

PKIU20I Ending Session on 2025/08/14 Time is 14:51:11

PKIU20I Session active for 0:00:00

Command error

Code : 8

SEVERE error

Resolution

As a workaround we can do the following:

- stop the cft/copilot

- make a copy of the file cftparm (.\cft\runtime\data\cftparm)

- make a new folder and position yourself in that folder

- export all certificates

PKIUTIL PKIEXT FOUT=certs.conf

- delete your current PKI database

PKIUTIL PKIFILE FNAME=$CFTPKU, MODE=DELETE

- create a new \ empty PKI database

PKIUTIL PKIFILE FNAME=$CFTPKU, MODE=CREATE

- open the output file generated earlier - certs.conf - with notepad or any other editor

- delete the whole block that starts with PKICER ID='Certificate_id' and ends with MODE=CREATE/REPLACE

and save the changes

- import the certificates using the updated certs.conf configuration file

PKIUTIL <prefix_character>certs.conf

Replace the <prefix_character> based on your system, @ for UNIX and # for Window