3rd parties Cert import to NAC, CAM

Unanswered Question

I generate the cert request from NAC CAM and give the file to the customer. Then customer give me back several file including "CAM.key, CAM.crt and CAM_DigiCertCA.crt".

When I import to the NAC, it fail and got the message "Must include end entity certificate .."

What is problem? Any step I missing?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Faisal Sehbai Mon, 09/28/2009 - 07:00

What file are you trying to import into the CAM? Can you just double click on the CAM.crt file and verify that it is indeed the identity cert?


tprendergast Mon, 09/28/2009 - 13:21

It looks like you have a chained cert and need to build a single certificate file from this. Review these docs and you should be good to go:


Which should tell you to look at:


Hope that helps.

redoak Mon, 09/28/2009 - 23:54

Try to combine (concatenate) only the private key and the certificate of the CAS (using notepad).

The CA Certificate should be imported first in the Trusted Certificate Authorities menu.

Faisal Sehbai Tue, 09/29/2009 - 18:04

The "End entity certificate" is the actual certificate you got for your CAS. Depending on the version of CCA you have you'll have to either import just that cert, or in newer versions (4.5 or 4.6) you'll have to combine the private key and the cert and upload that.

If all this is still unclear, best open a TAC case and let an engineer take a look at what you have.



Faisal Sehbai Thu, 10/01/2009 - 10:34


No tool needed for that. Just open your cert in notepad, open your key in notepad, and copy/paste both the files in a new file.

Call it cert.pem. Import that.




This Discussion