The request lacked necessary authorization to be completed

[Duck-dave]

Hello!

Hello!

As soon as I try to issue an SSH user key, I get the following error message:
The request lacked necessary authorization to be completed

On the CA, I can find these logs:
Aug 13 16:00:03 ca step-ca[41905]: time="2025-08-13T16:00:03+02:00" level=warning duration=4.061216ms duration-ns=4061216 error="authority.Authorize: authority.authorizeSSHSign: jwk.AuthorizeSSHSign: jwk.authorizeToken; invalid jwk claims: go-jose/go-jose/jwt: validation failed, token not valid yet (nbf)

What does this mean and how can I solve this?

Thanks in Advance!

[hslatman]

Hey @Duck-dave,

This problem can happen if there's too much difference in time between the CA and the system that signed the token. The CA checks the times to within a one minute leeway. In this case I can't tell the time on the system that signed the token, but the CA has the time in the log. If you can retry the request, check the time on the system you're requesting the SSH cert from. If they differ more than a minute (in the same TZ), try to get the systems to have a better time synchronized.

[Duck-dave]

Hi @hslatman,
Thank you for your response. You are right; the system time was not synchronized.
Now its working!

Best regards