cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1936
Views
0
Helpful
1
Replies

Cisco Secure ACS 3.1 SSL CSR

grshaw
Level 1
Level 1

I can successfully install a certificate in ACS if I use openssl to generate the CSR. However, I would like to generate this from within ACS 3.1.1 (for documentation purposes). When I use the ACS management page to generate the CSR and then paste this into verisign, verisign reports that the OU etc is missing (fair comment). Cisco's documentation reports the CSR from ACS can be used to generate a certificate on any CA. How if the ACS generated CSR is missing half the required information..

1 Reply 1

grshaw
Level 1
Level 1

To answer my own question.

To generate a valid CSR (for use with verisign) and key file.

1) Use openssl under cygwin if you don't have a *nix box.

2) Use the novell tool gwcsrgen2.exe (albeit with 512 bits)

It appears that CSACS 3.1 csr function does not work with verisign since verisign WWW site states that if you are requesting a cert from outside the US, the CSR must contain the ISO country code etc!!

Graham

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: