CTGKM3034E Cannot do 3592 rollover operation for non-3592 device group certificate.

Explanation

The certificate's device group must match the rollover device group.

System action

The operation fails.

Administrator response

Check the device group of the certificate and modify it to match the target rollover device group, or choose a different certificate for the rollover.