Troubleshooting
Problem
When trying to create or renew a certificate, you receive this error message:
"This program is trying to generate a file which has a name conflict with an existing file on the system. Either remove the existing file or specify a different file name."
Cause
This error stems from unexpected or residual stream files in the DCM certificate directories. These leftover files—sometimes created during failed CSR attempts or system rebuilds—cause DCM to incorrectly detect conflicts when it attempts to generate new certificate files (.kdb, .rdb, .sth).
DCM generates output files during operations such as:
- CSR creation
- Certificate renewal
- Certificate store creation
When unexpected files exist in the directory with similar naming patterns (e.g., DEFAULT.*), DCM fails because:
1. It attempts to create a temporary output file
2. A file with the same base name already exists
3. DCM interprets this as a naming conflict and aborts
Resolving The Problem
Validate DCM Directories by checking for non-product files with non-standard names.
WRKLNK to these locations:
/QIBM/UserData/ICSS/Cert/Server//QIBM/UserData/ICSS/Cert/CertAuth/
DO NOT move or delete any files explicitly meeting this criteria.
The file is named DEFAULT.KDB, DEFAULT.RDB, DEFAULT.POL, or DEFAULT.sthThe file has "LOCAL_CERTIFICATE_AUTHORITY" in its name
Anything else (copies, backups, other files i.e. DEFAULT.KDB.TXT) that does not meet the above criteria, move them to a new directory (i.e. /tmp).
Once those directories are cleaned up, retry the certificate creation/renewal or CSR creation again.
If you're still receiving the "name conflict" error, please open a case with IBM i Support, and upload the output of PRTSTORE:
Document Location
Worldwide
Was this topic helpful?
Document Information
Modified date:
30 March 2026
UID
ibm17266473