> Source: [sk139572](https://support.checkpoint.com/results/sk/sk139572)

# sk139572 - Active Directory Directory Scanner does not scan certificates for User Authentication (OneCheck)

| Property | Value |
|----------|-------|
| Solution ID | sk139572 |
| Date Created | 2018-11-05 |
| Last Modified | 2020-01-07 |
| Technical Level | Advanced |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X, R82.10, R82, R81.20 |
| OS | Windows |

## Symptoms

- * Active Directory Directory Scanner does not scan certificates for User Authentication (OneCheck)
* Scan of the Active Directory is performed in SmartEndpoint and shows "complete" status, but certificates are missing for users in User Authentication (OneCheck).
* Adding a certificate manually to a user via User Authentication (OneCheck) generates a server exception error when saving.
* *$UEPMDIR/log/server_messages.log* shows:  

  ```
  ERROR - Error on close application transaction
  com.checkpoint.uepm.backend.is.exceptions.TxException:
  TICKET_NUMBER = XXXXXXXXX. ADMIN_ID = XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX_pool-5-thread-4, ADMIN_NAME = XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX_pool-5-thread-4.
  Transaction was terminated because one of update commands failed.
  	at com.checkpoint.uepm.backend.is.infrastructure.TransactionManager.executeAppTransactionActual(Unknown Source)
  	at com.checkpoint.uepm.backend.is.infrastructure.TransactionManager.executeAppTransaction(Unknown Source)
  	at com.checkpoint.uepm.backend.is.infrastructure.BackendIsFacadeAbstract.executeAppTransaction(Unknown Source)
  	at com.checkpoint.uepm.blm.directoryscanner.synchronizer.LocalUepmSynchronizer.closeTransaction(Unknown Source)
  	at com.checkpoint.uepm.blm.directoryscanner.synchronizer.UpdatesConsumer.resendUpdatesInSeparateTransactions(Unknown Source)
  	at com.checkpoint.uepm.blm.directoryscanner.synchronizer.UpdatesConsumer.run(Unknown Source)
  	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
  	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
  	at java.lang.Thread.run(Thread.java:724)
  ...
  Caused by: com.ibatis.common.jdbc.exception.NestedSQLException:   
  --- The error occurred in sqlMap/Common.xml.  
  --- The error occurred while applying a parameter map.  
  --- Check the InsertSmartCardCertificates-InlineParameterMap.  
  --- Check the statement (update failed).  
  --- Cause: org.postgresql.util.PSQLException: ERROR: value too long for type character varying(255)
  	at com.ibatis.sqlmap.engine.mapping.statement.GeneralStatement.executeUpdate(GeneralStatement.java:91)
  	at com.ibatis.sqlmap.engine.impl.SqlMapExecutorDelegate.insert(SqlMapExecutorDelegate.java:447)
  	at com.ibatis.sqlmap.engine.imp
  ```

## Cause

The length of the certificate exceeds the default 255 character limit.

The length is determined by a combination of the subject DN and the issuer DN.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content