New Contributor

pending certificate enrollment request

A few hours after creating a Certficate Enrollment Request on the master controller, I received from my boss a wildcard certificate for the organization in the PFX format. Which means that the certificate was not created using the Certificate Enrollment Request I created form the controller. I tried to install the PFX certificate on the controller using both CLI and GUI with no success. I receiced the message:

"Switch Configuration

Error Uploading Certificate: CertMgr error.

I installed it on my windows PC then exported it in a PKCS7 format wiht no key exported then I got the erorr message:

Switch Configuration

Error Uploading Certificate: Cert public key did not match the private key in the CSR store

Would you please show me how to solve this problem?

Thank you all

Guru Elite

Re: pending certificate enrollment request

Try this command:


restore factory_default certificate

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Guru Elite

Re: pending certificate enrollment request

You should always do the CSR offline on another machine to ensure you have a backup of the private key.

Tim Cappalli | Aruba Security
@timcappalli | | ACMX #367 / ACCX #480
New Contributor

Re: pending certificate enrollment request

I believe the problem you are having is related to the certificate that you are using doesnt have a private key included in it.  Thus, the controller is reading the certificate and comparing it to the currently installed key which doesnt match.  Side note, this will happen even if you try this on a controller that only has the default factory certificate.  I would recommend manually making a pem in the correct order with private key at the bottom.  Certificate type is server cert.  Be sure to apply the certificate under management > general  > after you get a cert installed.

Search Airheads
Showing results for 
Search instead for 
Did you mean: