Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

importing a CSR created elsewhere?

This thread has been viewed 22 times

  • 1.  importing a CSR created elsewhere?

    Posted Mar 19, 2014 12:45 PM

    Hi, 

     

    Trying to import an SSL certificate, but I'm running into the error : 

     

    Error Uploading Certificate: Cert missing private key and failed to find a key generated from a CSR request in the system to match it

     

    I'm pretty sure I've got the right format (PEM), I believe that part of the problem is that the CSR was generated elsewhere, not on the controller.   I've got a ticket open w/ TAC, asking if there is anyway to import a CSR into the controller to try and resolve this error message.  Figured I'd ask the boards to see if anyone has done this before. 

     

    I have the CSR & have verified it against the certificate, so I really think all i need to do is import the CSR? 

     

     

    Thanks, 

     

     



  • 2.  RE: importing a CSR created elsewhere?
    Best Answer

    EMPLOYEE
    Posted Mar 19, 2014 12:47 PM
    If the CSR was not done on the controller, then you need to import the
    certificate with its private key in a pkcs12 formatted certificate.


  • 3.  RE: importing a CSR created elsewhere?

    Posted Mar 19, 2014 02:23 PM

    Thanks, 

     

    That did the trick. 

     

     



  • 4.  RE: importing a CSR created elsewhere?

    Posted Apr 30, 2015 03:46 PM

    Hi there.

    I was facing the same issue and try the PKCS12 solution but it still failed.

    Somehow I get

    "Error Uploading Certificate: Cert public key did not match the private key in the CSR store"

     

    The CSR has been generated on a Linux box as we have 15 different controllers that are supposed to use the same cert.

     

    I am kind of confused at this point .



  • 5.  RE: importing a CSR created elsewhere?

    Posted Apr 30, 2015 04:23 PM

    is there an old CSR which might be in the way?

     

    recheck your pkcs12 to make sure it is correct and contains the right info.