Re: Can't enroll the CA certificate to the PIX

From: Petr Lapukhov (petr@internetworkexpert.com)
Date: Sat Aug 26 2006 - 10:40:53 ART

• Next message: beatccielab: "Backbone (BB) Configuration"
• Previous message: 2nd CCIE: "line con authentication"
• Maybe in reply to: Stefan Grey: "Can't enroll the CA certificate to the PIX"
• Next in thread: Stefan Grey: "Re: Can't enroll the CA certificate to the PIX"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hmmm,

Try clearing your keyring "ca zero rsa" and generating a new key
"ca generate rsa key 512"

HTH

2006/8/26, Stefan Grey <examplebrain@hotmail.com>:
>
> Hello guys.
> I can enroll the certificate to any router. I can authenticate the PIX by
> the CA. But when I type command: enroll ca server cisco.
> It tells me
>
> % Cannot find key with correct FQDN
> What does this error mean?? How can I fix the problem??
>
>
> PIX config:
>
> ca identity server 172.16.1.100:/certsrv/mscep/mscep.dll
> ca configure server ra 2 20 crloptional
>
> _________________________________________________________________
> Discover the magic of RSS feeds at MSN Ireland! http://ie.msn.com/
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>

-- 
Petr Lapukhov, CCIE #16379
petr@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987
Outside US: 775-826-4344

• Next message: beatccielab: "Backbone (BB) Configuration"
• Previous message: 2nd CCIE: "line con authentication"
• Maybe in reply to: Stefan Grey: "Can't enroll the CA certificate to the PIX"
• Next in thread: Stefan Grey: "Re: Can't enroll the CA certificate to the PIX"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:58 ART