topic Re: Cisco ISE 1.3 - Error creating .CSR in Network Access Control

Cisco ISE 1.3 - Error creating .CSR

SupportAC — Fri, 21 Feb 2020 18:41:12 GMT

Hi,

We have a certificate expiring next 17th. We need to generate .CSR again in order to sign this CSR our CA. The problem is that when we try to create this .CSR we receive this error:

In the past, we created .CSR without problems. Why are we getting this error??

thanks

Re: Cisco ISE 1.3 - Error creating .CSR

ajc — Mon, 11 Dec 2017 18:46:12 GMT

First, you are using a old version so you should upgrade it at least to 1.4 version which I think is significantly stable (in comparison with the latest 2.x)

Cisco announces the end-of-life dates for the Cisco Identity Services Engine (ISE) Software Version 1.3 software.

Software maintenance support for 1.3 and 1.3.X software releases end on December 31, 2017. No patches or maintenance releases will be provided for ISE 1.3 and 1.3.X releases after that date.

Starting December 31, 2016 only sev1 and security vulnerability issues will be addressed.

Software maintenance requires an active service contract.

2nd, you are trying to install a cert with the exact name like an existing one. SO, please create a new CSR and include one of the following fields Organization, City, Country, State to make the CN different to the existing one.

Question; ARE YOU using SAN Certificates?

Re: Cisco ISE 1.3 - Error creating .CSR

SupportAC — Wed, 13 Dec 2017 09:45:37 GMT

There is no .CSR created. There are only certificates. We try to create a CSR, but the subject is the same like you can see in the error. We need the same subject because we are renewing this certificate.

Re: Cisco ISE 1.3 - Error creating .CSR

ajc — Wed, 13 Dec 2017 17:08:57 GMT

Post an screenshot of your system certificate, I want to check why the error says "duplicated cert.