The Error installing SSL certificate parse error is displayed during SSL certificate installation on the VPN 3000 Series Concentrator with software version 4.2

Document

Wed, 07/22/2009 - 19:36
Jun 18th, 2009
User Badges:
  • Gold, 750 points or more

Core issue

This parse error is displayed if the VPN concentrator does not have a root Certificate Authority (CA) certificate installed.


Resolution


Regardless of whether Simple Certificate Enrollment Protocol (SCEP) or manual enrollment is used, the VPN concentrator must have a root CA installed if third-party certificates are used. In order to obtain and install the Secure Socket Layer (SSL) certificates, perform this procedure:


  1. Obtain and install the root CA certificate.  


       
  2. Create an enrollment request for one or more identity certificates.  


       
  3. Request an identity certificate from the same CA that issued the root CA certificate.  


       
  4. Install the identity certificate on the VPN concentrator.  


       
  5. Enable Certificate Revocation List (CRL) checking and caching.  


       
  6. Enable Certificates.  


Ideally, this procedure resolves the issue. Refer to Certificate Management for additional help on certificate enrollment.

Loading.

Actions

This Document

Related Content