topic Re: Getting error when generating certificate from Pxgrid Services."Certificate generation failed: Error while reading the certificate CN or SAN: The given Subject is null or CN value is missing" in Network Access Control

Getting error when generating certificate from Pxgrid Services."Certificate generation failed: Error while reading the certificate CN or SAN: The given Subject is null or CN value is missing"

Gagandeep Singh — Tue, 09 Jan 2018 23:49:53 GMT

Hi Team,

Running ISE 2.2 patch 3,4 on deployment of 10 nodes.

2 pxgrid

4 PSN

2 MNT

2 ADMIN

Recent change : Promote Secondary as Primary for some reason.

Getting error when generating certificate for Stealth watch from pxgrid services.

"Certificate generation failed: Error while reading the certifi cate CN or SAN: The given Subject is null or CN value is missing"

Saw the same error in ise-psc.log.

Regenerated internal CA certificates. Still didn't work.

Tried in lab and it worked after ISE ROOT CA replace.

Revert the secondary to primary. Just to see if that is causing the issue. Regenerate internal CA but got same error.

Any help would be appreciated.

Regards

Gagan

Re: Getting error when generating certificate from Pxgrid Services."Certificate generation failed: Error while reading the certificate CN or SAN: The given Subject is null or CN value is missing"

hslai — Wed, 10 Jan 2018 03:59:38 GMT

Please analyze the support bundle and ensure all services started ok. If no clue, open an ISE ESC case.

Re: Getting error when generating certificate from Pxgrid Services."Certificate generation failed: Error while reading the certificate CN or SAN: The given Subject is null or CN value is missing"

toyip — Tue, 03 Sep 2019 21:31:08 GMT

Similar situation: Trying to generate pxGrid certs from ISE 2.2. I get an error message "Certificate generation failed with Exception: null". Was this ever resolved?

Re: Getting error when generating certificate from Pxgrid Services."Certificate generation failed: Error while reading the certificate CN or SAN: The given Subject is null or CN value is missing"

Gagandeep Singh — Tue, 03 Sep 2019 21:38:09 GMT

try re-issuing ISE CA Certificates ( that means Regenerating ISE Root CA from

Administration > Certificates > Certificate Signing Requests > Generate a CSR

> Generate ISE Root CA )

Re: Getting error when generating certificate from Pxgrid Services."Certificate generation failed: Error while reading the certificate CN or SAN: The given Subject is null or CN value is missing"

RaffyLindogan — Wed, 04 Sep 2019 01:45:33 GMT

Hi mate,

The question is a bit vague.

Are you generating the CSR of Stealthwatch?

Or are you generating the CSR for ISE for pxGrid?

Can you confirm on which process is failing?

Since these boxes are already running, there should be an existing "Default self-signed certificate".

You can reuse them by enabling pxGrid on the cert.

You can then upload this cert to the SMC under "Certificate Authority Certificates"

While on SMC, you should generate the keys and csr via cli.

Thanks.

Raffy