cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1080
Views
0
Helpful
2
Replies

Import 4096-bit root CA fails

bornatswitch
Level 1
Level 1

Hello

I tried to install our new root CA to our Cisco 3030 VPN Concentrator. But as the certificate has a length of 4096-bit, the import fails reporting: "Error installing trusted certificate: Unsupported key size."

Thank you for any help.

Regards,

Daniel Bertolo

2 Replies 2

at
Level 1
Level 1

hi

we had the same issue last year;

Cisco Supports on 3030 only 2048-bit;

I think Cisco supports on ASA 4096-bit;

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_administration_guide_chapter09186a00803ef352.html

regards

alex

Kamal Malhotra
Cisco Employee
Cisco Employee

Hi Daniel,

Alex seems to have answered your queries. Cisco VPN 3000 series concentrators do not support 4096 bit key for the certificates. It only supports upto 2048. 4096 is only supported on the ASAs.

HTH,

Please rate if it helps,

Regards,

Kamal