Can't import user certificate in wallet manager EBS 12

Hi there.
I'm trying to configure my EBS 12 with SSL and I'm following the instructions described in metalink note number 376700.1
Everything went well untill I tried to import the user certificate isued by verysign, when I try to do that the following error occurs: user certificate import has failed because the ca certificate does not exist.
I created the request certificate, I sumbited to verysign, got my free trial certificate and when I try to import it, the error happens.
Got any sugestions in how to overcome this problem?
Regards,
Ricardo Vilhena

Ricardo,
There is one reported issue with the test CA Root is that it is saved as DER encoding, but OWM expects BASE64 encoding. Please refer to the following note for the suggested solution.
Note: 228638.1 - How to configure SSL Communication between SSO Server and OiD in 9iAS Release 2
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=228638.1
If the above does not help, then please review the following:
Note: 300723.1 - OWM Import User Certificate Key Error
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=300723.1

Similar Messages

Importing updated certificate into Wallet Manager on Oracle 904

I have a certifiacte currently installed on our Oracle Application server that is about to expire. I went to our certifiacte provider and renewed the certifiacte for another year. I got the new certifiacte file and have copied it to the folder.
I open up wallet manager and open the correct wallet. I see the certifiacte for the site and it shows it is about to expire. I went to import the new file but I am being told that I can not import it becasue:
1. Input was not a valid certificate
2. No matching certifiacte request found
3. CA does not exist
It is not 1. because I can pull it in as a trusted certificate and see all of the information is good. Since it is the same CA I am guessing that this is good. That leaves the no matching certificate request. Why is it looking for a cerrtifiacte request? Can you not just perform the upgrade? If so, how do I do this?
Thanks much
Dave

Weird. I was logged in as myself and could not do anything to the user certificate. I logged in as administrator, the account that added the certificate, and was able to remove the certificate(I exported the cert first). I tried to apply the new, updated one to get all the same errors. I said screw it and tried to reimport the certificate I exported and the new dates showed up. I do not understand why, but everything nw appears to be working.
Thanks to all who read and may be interested.

How can I import security certificates from Explorer to Firefox?

I deleted several certificates before I decided it was a bad idea - too late ... many of my frequently visited sites won't validate at all or, will come up in plain text vs. html. Those sites still work in Explorer so, logic says I could import trusted certificates.

You need to export the certificates in IE and import them in the Firefox Certificate Manager.
*Firefox/Tools > Options > Advanced > Certificates: View Certificates

Can't import ISO Files in VM Manager because of empty Server Pool Drop Down

Hello,
I have the problem I can't import ISO files to my ressources because in the import mask the Server Pool Name Drop Down is empty. In the Virtual Machine Templates mask the Server Pool Name is available and I have already one VM running with a oracle template.
The Server is 2.2.1 and the vm manager is 2.2.0. The server is a Pentium 4 3.2 GHz with 4 MB of RAM. The High Availabiliy Mode is enabled for this server pool.
Has anyone an idea what the problem could be?
Any help will be appreciated.
Thx in forward
Ben

I am not expert in this area myself, but I believe the issue may be with shared storage changes that are needed for high availability.
The following reference may help: http://download.oracle.com/docs/cd/E15458_01/doc.22/e15444/ha.htm
I may of course be misleading you completely.

Can not import Verisign certificate

Dear all,
I am trying to import a Verisign certificate in my ABAP BW 3.5
Production system.This is a certificate renewal as I had a certificate there for a year that is to expire on the 12th of June. However, because of the fact that we had to change the SSL
PSE so that it contains field SP, it is more like installing a new
certificate.
What I did: I deleted the old PSE that didn't have any information about the "State" field and created a new one.
I then created the CSR request to Verisign. I received
the response from Verisign, which I pasted in a text file together with the Verisign Intermediate and Verisign Root certificate which I used last year as well when I installed a Verisign certificate in this server for the first time.
When I apply the response, by pasting the contents of the text
file created above, I get the message:
"CA Certificate missing in database"
I have already looked at notes 508307, 518185, 510007, 1074447, 511919
I am sure that the Verisign root and Intermediate certificates are ok because I have used them successfully in the past in the same server and recently to create the certificate chain for other system certificates of my EP 6.0 landscape.
I am also sure that the Verisign CA root certificate exists in the
database, I checked table STRUSTCERT and it is there. Also, if it didn't exist, I wouldn't have been able to import the Verisign certificate last year
I haven't restarted ICM so the previous certificate still works. After the 12th of June though it will expire and all funtionality based on HTTPS in BW will not work.
Many thanks in advance for your help
Regards
Andreas

Just created a new SSL PSE and imported the certificate chain again and this time it worked...

How can I Import CA Certificate into a new user profile when it's created

I need to deploy a CA Root Certificate to new firefox user profile when it is created in windows. I Seen somewhere that you could place a working copy of cert8.db in %programfiles%\firefox-installation-folder\defaults\profile and this would get added when a new firefox profile is created. However, the profile directory doesn't exist in the defaults folder and when I created it this method still didn't work.
Is there a way to get firefox to create new profiles with preconfigured Certificates?
Right now when new users open firefox for first time it is unable to connect to any SSL sites through our proxy server until the user adds the proxies ca certificate or it gets added later via logon script (at next user logon).

Update... For anyone looking for a similar solution:
I ended up adding more to my logon script I have it check for a user's mozilla profile first and if not found it will use command line "firefox.exe -createprofile default" to make one. After that I just copy a working cert8.db to that new profile. Then when the user opens firefox for first time, it will detect this new profile, and it will load it along with the correct CA Certs intact...
Also, for existing profiles my script just uses nss certutil to add my proxy CA Certificate to the users profile cert8db.

How can i prevent users to delete remote management on their IPADs

hello everyone
i have Mac with OS X server i have created profile manager to manage the students I Pad's
students keep deleting the profile remote management profile
anyway to help me to manage their I PADS remotely

When configuring a profile in Profile Manager, if you edit the General entry you can set it to require a password before allowing a user to remove the profile. If you don't give users this password then they will not be able to remove it.

How can I import personal certificates into firefox that are not pkcs12 files (.cer or other)?

I am trying to import .cer personal certificat into mozzila so I can go to an secure site (bank account online) but cannot do it since it is not pkcs12 type of file. Can you help me.

I tied that, but when I try to import them to mozzila all it wants are pkcs12 files. It does not accept any other.

Can't import users and group backup

I exported the list of user names and groups prior re-installing 10.6 server.
Now when I try to import the backup, I get the error:
"The following users could not be imported because each of their first short names contains an invalid character (such as a period.)"
followed by the list of my users.
According to Apple's user creation documentation, the following characters are allowed:
"For the first short user name, use only these characters. Subsequent short names can contain any Roman character.
* a through z
* A through Z
* 0 through 9
* _ (underscore)
* - (hyphen)
. (period)"
Is that a bug? is there a way around it ?
Thanks

I am also encountering the same problem. Can anyone assist?? I had to demote my OD due to a DNS change and lost 200+ accounts unless we can find a solution.
Thanks for anyones suggestions.

Oracle Wallet Manager an dPCK#12

HI,
Is the Oracle Wallet Manager able to import a user certificate with the format pck#12?
If so, from wich version of the Oracle Manager and how do I do this.
Thanks
Arny van der Deijl
Oracle Netherlands

Hi Arny:
Yes, we can use wallet manager to import PKCS#12 certificates.
This is certified with 9i release 1 and later.
There are several places where you can get details about importing user certificates with wallet manager.
First look at the Oracle Advanced Security Admin Guide chapters 15, 16, and 17 but chapter 16 has the most information
about wallet manager.
Heres a link to the guide:
http://otn.oracle.com/docs/products/oracle9i/doc_library/901_doc/network.901/a90150/toc.htm
Also, the OID admin guide has good information about wallet manager as it relates to OID. Appendix D of the OID admin
guide is a good place to start.
Here is a link to the OID Admin Guide:
http://otn.oracle.com/docs/products/ias/doc_library/90200doc_otn/manage.902/a95192/toc.htm
Hope this helps,
Jay

Importing Certificate in Oracle Wallet Manager fails

Hi,
We are using Oracle Application Server 10g Release 2. When I try to import a certificate issued by a certificate authority, (using Operations > Import User Certificate), the wallet returns the following error:
User certificate installation failed.
Possible errors:
- Input was not a valid certificate
- No matching certificate request was found
- CA certificate needed for certificate chain not found. Please install it first
The certificate is obtained after raising a Certificate Request from the wallet manager.But I am not sure whether we have saved the wallet after raising the certificate request.
Now I have the certificate issued by the CA. Is there any way that I can import this certificate.? what is the possible solution?
Thanks & Regards,
Rafeek.

Did you import CA certificate as a trusted certificate before importing the user certificate. If not, import CA cert first. To make sure you have saved the certificate request, please open the wallet and see if it exists. Hope this helps.
Rgds,Ramesh

Unable to import the user certificate into the Oracle Wallet Manager

Hi,
I am configuring the External Authentication plugin using the password filters.
i am using the version 10.1.0.5.0 version of Oracle Wallet manager
inorder to do that i am enabling the SSL mode.
to enable the SSL mode i followed the some steps in OWM and OCA admin and user console.
when i approved a certificate as admin and importing to the Oracle Wallet Manager, i got an error that
User Certificate Installation failed.
Possible errors:
- Input was not a valid certificate
- No matching certificate request found
- CA certificate needed for certificate chain not found.
Please install it first
can anyone help me how to resolve this problem.

hi,
thanks for your reply pramod
I tried to import the two certificate files(rootca.crt and server.crt). but i am got the same error.
what may be the problem.

How can we use two user certificates at a time?

Hi,
I want to use two different user certificates for two different trading partners. Can we keep two private keys in single wallet and use those simultaneously? In our case our two trading partners are using different CA's certificate and we are forced to use two private keys.
Please tell me that is there any way by which I can manage two private keys at a time in single wallet?
Please help.
Thanks & Regards,
Anuj Dwivedi

a. How To Extract A Private Key and Certificate From A Wallet
Oracle does not provide any functionality within Wallet Manager, or otherwise, to do this. However this can be achieved using OpenSSL.
- If a Linux server is available, OpenSSL is usually installed by default (/usr/bin/openssl). If not you can download it from www.openssl.org
- To extract the key and certificate from the Wallet run:
openssl pkcs12 -in ewallet.p12 -passin pass:<wallet_password> -out ewallet.txt -nodes
- The resulting ewallet.txt is a file that contains the unencrypted private key, the certificate and all the root CA's in the wallet. Then the relevant information for the key, and certificate(s) can be copied to separate files to create the individual key and certificate(s)
b. How to Convert a Certificate and Private Key to an Oracle Wallet
SSL2OSSL (UNIX) and OSSLCONVERT (Windows) are tools that allow you to convert Private Keys and Certificates to an Oracle Wallet format. This format is required for Oracle Application Server. $ORACLE_HOME/Apache/Apache/bin/ssl2ossl
Points to Note:
* Even though capath, cafile, and chain are optional, at least one must be specified.
* All the certificates that are being converted must be in base64 format.
* If you are converting a self signed certificate, running ssl2ossl/osslconvert does not import the certificate as a Trusted Certificate. Therefore it is necessary to import the certificate as a Trusted Certificate in Wallet Manager after its converted, otherwise the Wallet will not work with Application Server.
usage:
$ ssl2ossl -cert /<path>/server.crt -key /<path>/private.key -cafile /<path>/rootca.crt -wallet /ssl/wallet -ssowallet yes
Enter wallet password:
Verifying password - Enter wallet password:
SUCCESS
This will create a ewallet.p12 file in /ssl/wallet

Oracle Wallet Manager hang when import a trusted cert

i'm facing problem when import 1 of my client's cert.
it hang and not responsive when i try to import it.
the oracle wallet manager version is 10.1.0.4.2
my client's cert is 512bit self signed
Message was edited by:
kinwah.lai

Hi,
To use it, you need to convert the cert into binary format. Then it is simply dumpasn1 bincert.cer. This dumpasn1 output is obtained from your cert:
0 30 524: SEQUENCE {
4 30 438: SEQUENCE {
8 A0 3: [0] {
10 02 1: INTEGER 2
13 02 17: INTEGER
: 00 C4 CE 12 F5 0D A9 0A 4C C1 56 80 3F B0 01 7C
: 99
32 30 13: SEQUENCE {
34 06 9: OBJECT IDENTIFIER
: sha1withRSAEncryption (1 2 840 113549 1 1 5)
45 05 0: NULL
47 30 126: SEQUENCE {
49 31 11: SET {
51 30 9: SEQUENCE {
53 06 3: OBJECT IDENTIFIER countryName (2 5 4 6)
58 13 2: PrintableString 'MY'
62 31 17: SET {
64 30 15: SEQUENCE {
66 06 3: OBJECT IDENTIFIER localityName (2 5 4 7)
71 13 8: PrintableString 'Malaysia'
81 31 35: SET {
83 30 33: SEQUENCE {
85 06 3: OBJECT IDENTIFIER organizationName (2 5 4 10)
90 13 26: PrintableString 'Carrefour.net V22 Malaysia'
118 31 55: SET {
120 30 53: SEQUENCE {
122 06 3: OBJECT IDENTIFIER commonName (2 5 4 3)
127 1E 46: BMPString
: '[email protected]'
175 30 30: SEQUENCE {
177 17 13: UTCTime '070309053122Z'
192 17 13: UTCTime '090309053122Z'
207 30 126: SEQUENCE {
209 31 11: SET {
211 30 9: SEQUENCE {
213 06 3: OBJECT IDENTIFIER countryName (2 5 4 6)
218 13 2: PrintableString 'MY'
222 31 17: SET {
224 30 15: SEQUENCE {
226 06 3: OBJECT IDENTIFIER localityName (2 5 4 7)
231 13 8: PrintableString 'Malaysia'
241 31 35: SET {
243 30 33: SEQUENCE {
245 06 3: OBJECT IDENTIFIER organizationName (2 5 4 10)
250 13 26: PrintableString 'Carrefour.net V22 Malaysia'
278 31 55: SET {
280 30 53: SEQUENCE {
282 06 3: OBJECT IDENTIFIER commonName (2 5 4 3)
287 1E 46: BMPString
: '[email protected]'
335 30 92: SEQUENCE {
337 30 13: SEQUENCE {
339 06 9: OBJECT IDENTIFIER rsaEncryption (1 2 840 113549 1 1 1)
350 05 0: NULL
352 03 75: BIT STRING 0 unused bits, encapsulates {
355 30 72: SEQUENCE {
357 02 65: INTEGER
: 00 86 75 E6 DA C8 18 CB 77 44 C5 E9 48 F7 45 41
: 85 52 8E 70 E7 D1 D0 C5 7E 48 5D BC AB 9E C9 99
: CC 70 FC 18 F2 E4 12 78 38 7D CA 06 3C 18 64 E6
: FD 6B 3A CD 00 02 2B A0 67 CB F0 86 1C 13 0F 43
: D1
424 02 3: INTEGER 65537
429 A3 15: [3] {
431 30 13: SEQUENCE {
433 30 11: SEQUENCE {
435 06 3: OBJECT IDENTIFIER keyUsage (2 5 29 15)
440 04 4: OCTET STRING, encapsulates {
442 03 2: BIT STRING 0 unused bits
: '00000101'B
: Error: Spurious zero bits in bitstring.
446 30 13: SEQUENCE {
448 06 9: OBJECT IDENTIFIER
: sha1withRSAEncryption (1 2 840 113549 1 1 5)
459 05 0: NULL
461 03 65: BIT STRING 0 unused bits
: 51 13 3B 3C 7A EA 9A 97 30 FA F1 2E E5 A4 CD 77
: D6 02 6D BF 1B 4D E3 F3 5F 93 3F D7 96 0E 40 69
: 8A 29 B4 B1 B5 C0 79 B8 4C 6E 96 C6 15 26 61 F7
: 4E D5 27 9C 71 B6 5D 92 E6 3B 71 6E 76 02 E1 97
0 warnings, 1 error.
As you can see, there is an error: Error: Spurious zero bits in bitstring. For this particular instance, OWM cannot import this cert properly. Please ask your tp to provide a self signed cert that complies with the ASN1 standard.
Eng

Oracle Wallet manager error

Hi all,
Inorder to test SSL, i created a certificate request in OWM.Then i got a trial certificate from verisign for this request.What should i do now ? I tried to import that certificate in Oracle Wallet manager but getting this error.
"Trusted Certificate Installation Failed.
Input was not a valid certificate".
Please guide me
Srini

belw is the note
PURPOSE
To list the steps needed to configure Oracle HTTP Server (OHS) to use the Secure
Sockets Layer (SSL) when installed with Oracle9i Application Server (9iAS)
Release 2 (9.0.2). The below instructions show, step by step, instructions for
obtaining a trial certificate from a Certificate Authority, such as Verisign or
Thawte. Please refer to the Oracle 9iAS Documentation for further details.
SCOPE AND APPLICATION
Oracle9i Application Server (9iAS) Release 2 (9.0.2 and above)
Configuring SSL with Oracle HTTP Server in 9iAS Release 2
There are two major steps needed to configure SSL in 9iAS:
I. Create an Oracle Wallet which contains an SSL Certificate
II. Configure httpd.conf directives to enable SSL with OHS
NOTE:
Only standard server certificates are supported. These are sometimes referred
to as "40-bit Certificates", but will allow 128-bit encryption provided the
browser supports 128-bit encryption. 9iAS Release 2 does not support Global
Server Certificates, called "128-bit Certificates", that allow 56-bit export
browsers to step up to 128-bit.
STEP I: Configuring Oracle Wallet Manager (OWM)
1. Start Oracle Wallet Manager from the 9iAS $ORACLE_HOME.
Note: If you wish to use AutoLogin features you must start OWM as the user
who owns the httpd parent process.
To start Oracle Wallet Manager:
On Windows: select Start > Programs > Oracle - ORACLE_HOME >
Integrated Management Tools > Wallet Manager
On UNIX: enter owm at the command line.
2. Create an Oracle Wallet which contains an SSL Certificate:
- Select Wallet -> New
- Enter a password for the wallet e.g Welcome1
- Create a Certificate Request.
- Enter the details for the request. For example:
     Common Name:          <hostname.domainname>
Organizational Unit:      Support
Organization:      Oracle
     Location:          Reading
     State:               Berkshire
     Country:          United Kingdom
     Key Size:          1024bits
* Common Name has to match the hostname.domainname that the webserver is
known as. This is the Servername parameter in the httpd.conf file, and
is the hostname.domainname that users will enter in the browser URL.
- Click OK.
- Click 'Certificate:[Requested]' and select from the Menu 'Operations' and
'Export Certificate Request'
- Save to a file e.g server.csr
- Open the file in a text editor and copy the contents of the certificate
signing request, to be pasted in a Certificate Authority (Verisign) form.
An example is shown below:
-----BEGIN NEW CERTIFICATE REQUEST-----
MIIBtzCCASACAQAwdzELMAkGA1UEBhMCR0IxEjAQBgNVBAgTCWJlcmtzaGlyZTEQMA4GA1UEBxMH
cmVhZGluZzEPMA0GA1UEChQGb3JhY2xlMRAwDgYDVQQLFAdzdXBwb3J0MR8wHQYDVQQDFBZ1a2Ro
MTkzNC51ay5vcmFjbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCYkFMb9x4ehsG3
yQ2ub319GxPW+/TC3NSIYRLzEa49EziqBUr08R3Ssn9+6nolVjj1eb3rzwCfjiOSzsp1lSa/B9Vo
63pwP6xLbCgF8J86YfcZvavgLzY0Yc1fPfRxpZkb/jjt+F1zkaI6Lilm5YU3bRNYMb36TAWxUYL1
m6wZOwIDAQABoAAwDQYJKoZIhvcNAQEEBQADgYEACKXTmPHaSe3Lx3onnKJk/qI8SzpKyQC/B29v
JGg1+7Lb7gl052Y9WKxbKHzOQOYr8yYxMXNBCUwW6kBAFoxTWSpIxIQOpJXcsu1RlHKaLfAnw053
LiwpRB6do7MBrVgMRiv3AyTkJkgRzSxABWAgNpBPbhH+L6PZj5tSjOPErKA=
-----END NEW CERTIFICATE REQUEST-----
3. Request a Certificate from a Certificate Authority:
- Load a web browser and go a Certificate Authority website of your choice.
The examples below are from www.thawte.com:
- Click on 'request your free trial'.
- Fill in the necessary name and address details etc. and 'Submit'.
- Paste in the certificate request into the box under the
'Certificate Signing Request' Section.
- Select "Test X509v3 SSL Cert" and hit "Generate Test Certificate"
- Once submitted the Trial Certificate will appear on screen similar to below:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
- Copy the certificate to a file called server.crt
- Get the Trusted CA Root certificate by accessing:
https://www.thawte.com/roots/index.html
- Copy the certificate that appears on the screen to a file called
servertest.crt
- Ftp or move the files to a directory on your server
- In Wallet Manager select Operations -> Import User Certificate.
- It will then ask you if you want to Paste the certificate or load
from a file. Choose 'Select a file that contains a certificate'.
- Select the file server.crt and hit OK.
- At this point, the Wallet Manager may complain that the Trusted CA Root
Certificate does not exist in the wallet. It will ask if you want to
import it now. Select Yes. See Below
- Select 'Select a file that contains a certificate' and select the
servertest.crt file.
- If this completes successfully you should see Certificate:[Ready] and the
Thawte Test CA Root will appear in the list of trusted certificates.
- If you desire Oracle HTTP Server to AutoLogin to the Wallet, then select
AutoLogin. (Wallet Manager must have been started as the owner of the
httpd parent process for this to work).
- From the menu, File -> Save
Save the Wallet in a directory where the 9iAS user has permission to access
* If you generated your test certificate via www.verisign.com there is an additional
step required if OWM is not accepting the Trusted CA Root Certificate. The step is
as follows:
In OWM, at the point of message "User certificate import has failed because the
CA certificate does not exist". You are expected to import the CA certificate.
For Verisign, that would be the 'Test CA Root' for the Trial version. Verisign's
email has instructions on how to download the Test CA Root. One problem with the
Test CA Root is that it is saved as DER encoding, but OWM expects BASE64 encoding.
Please do following, using Internet Explorer 5.X as example.
1. Following Verisign instructions and install Test CA Root
certification into IE.
2. Export 'Test CA Root' from IE in BASE64 format
Tools -> Internet Options -> Contents -> Certificates
-> Trusted Root Certificate Authorities
Select CA issued by Versign with following Description in 'Issued to' column
"For Versign authorized testing only ....."
Export -> Next -> select Base-64 encoded X.509(.cer)
The file saved must me accessible to OWM
3. When prompted to load 'CA certificate ', provide the Base64 encoded file.
Then, continue where you left off when OWM did not accept your Trusted CA
Root Certificate.
STEP II: Configuring Oracle HTTP Server (OHS)
Please review the default directives in the httpd.conf file that relate to SSL by
opening the file in a text editor and search on "SSL". If you have not already
done so, please make a back up of this file. Do NOT hand edit this file without reading
the precautions in the 9iAS Documentation. You should use the Enterprise Manager (EM)
Website to modify this file. For SSL to work, the SSL 'listen' port must match the
"VirtualHost _default_" directive within the file. All other SSL parameters are
set to the default, and you can modify at a later time, depending on your needs.
## SSL Support
Listen 80
Listen 443
#443 is the SSL port number.
##Further down in file:
<VirtualHost default:443>
For the purposes of a basic SSL configuration, you should only need to
change the following directives:
SSLWallet
SSLWalletPassword
- Change the SSLWallet directive to the path where you saved your wallet, i.e:
SSLWallet file:/tmp/wallets
- If you get an error, ADMN-906025 with exception 806212, when starting OHS
after modifying httpd.conf, it is because you need to supply this password.
You may also see errors such as the following:
Error Failed to restart HTTP Server.
Timeout has been reached. Timeout has been reached.
If you did not select AutoLogin, then you need to change the SSLWalletPassword
to your clear text Wallet password by adding the following into your httpd.conf
SSLWalletPassword <yourPassword>
- If you wish to encrypt the SSLWalletPassword refer to the following:
[NOTE:184677.1]
How to Use IASOBF to Encrpyt a Wallet Password Within 9iAS Release 2
- Save the configuration, and restart Oracle HTTP Server
- Test a URL to Oracle HTTP Server in SSL mode:
https://<hostname.domainname>:<port>

Can't import user certificate in wallet manager EBS 12

Similar Messages

Maybe you are looking for