Getting "SEC_ERROR_BAD_PASSWORD" when running `ipa cert-show`

Solution Verified - Updated -


  • Cannot install Replica with CA:
  • requests.exceptions.HTTPError: 403 Client Error: 403 for url:
  • Unable to execute ipa cert-show on existing CA:
  • certutil: could not authenticate to token NSS Certificate DB.: SEC_ERROR_BAD_PASSWORD: The security password entered is incorrect.


  • Red Hat Enterprise Linux 8
  • Red Hat Identity Management

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content