Security

Reply
New Contributor
Posts: 1
Registered: ‎06-17-2014

pending certificate enrollment request

A few hours after creating a Certficate Enrollment Request on the master controller, I received from my boss a wildcard certificate for the organization in the PFX format. Which means that the certificate was not created using the Certificate Enrollment Request I created form the controller. I tried to install the PFX certificate on the controller using both CLI and GUI with no success. I receiced the message:

"Switch Configuration

Error Uploading Certificate: CertMgr error.

I installed it on my windows PC then exported it in a PKCS7 format wiht no key exported then I got the erorr message:

Switch Configuration

Error Uploading Certificate: Cert public key did not match the private key in the CSR store

Would you please show me how to solve this problem?

Thank you all

Guru Elite
Posts: 21,512
Registered: ‎03-29-2007

Re: pending certificate enrollment request

Try this command:

 

restore factory_default certificate


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite
Posts: 8,761
Registered: ‎09-08-2010

Re: pending certificate enrollment request

You should always do the CSR offline on another machine to ensure you have a backup of the private key.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
New Contributor
Posts: 2
Registered: ‎06-11-2017

Re: pending certificate enrollment request

[ Edited ]

I believe the problem you are having is related to the certificate that you are using doesnt have a private key included in it.  Thus, the controller is reading the certificate and comparing it to the currently installed key which doesnt match.  Side note, this will happen even if you try this on a controller that only has the default factory certificate.  I would recommend manually making a pem in the correct order with private key at the bottom.  Certificate type is server cert.  Be sure to apply the certificate under management > general  > after you get a cert installed.

Search Airheads
Showing results for 
Search instead for 
Did you mean: