Symptom:
An ndstrace with PKIA tag active shows: "Exiting pkiInstall::CreateOrganizationalCA, -708"
The -708 error was also observed in ndsd.log
ndsconfig upgrade fails with the -708 error
iManager certificate plugin experiences freezes
Cause:
Data corruption had happened where attribute values pointed to deleted objects
The attribute NDSPKI:Tree CA DN on the CN=Security had a value pointing to a non-existent/deleted Object
The attribute SAS:Service DN on the NCP Server Object had a value pointing to a non-existent/deleted Object
Also one server was also listening on port 524 on a non-routable IP Address