topic Re: Unable to import ca pairs key on ise node via cli in Network Access Control

Unable to import ca pairs key on ise node via cli

MaErre21325 — Fri, 10 Jun 2022 13:00:11 GMT

Hello guys,

i deployed a new node on my ise environment and i'm trying to import the ca key pairs from my repository via cli but i receive this error:

"Certificate files import from Repo failed, please verify repository settings"

this is very strange because doing a "show repository [repository name]" i can see all the file stored in it and this repository was used to export the ca key pairs, so i can understand the problem.

i've already stopped services and reloaded the node with no results...
The name of the ca key pairs is :"ise_ca_key_pair, i've already changed it but had the same output.
Do you have any tip?

In attachment the screenshot of what i receive.

Ise version is 2.7 patch 7

Thank you

Regards

Re: Unable to import ca pairs key on ise node via cli

Arne Bier — Mon, 13 Jun 2022 00:55:59 GMT

Hi @MaErre21325

I am curious, why are you importing the CA key pairs into this new node? Is this for a BYOD deployment?

Did you enable the debug level 7 on the CLI before attempting the import? This debug generally is useful for any file transfer issue. Perhaps your issue is not file transfer related.

debug transfer 7

When you view the repo with the show repo command, does that work?

regards

Arne

Re: Unable to import ca pairs key on ise node via cli

MaErre21325 — Mon, 13 Jun 2022 07:32:28 GMT

Hi @Arne Bier ,

this new node will work as PAN and MNT, yes we have BYOD enviroment that is managed by another node (dedicated PSN).

when i view my REPO throgh the show repository command it works correctly and i'm able to see every file in the REPO.

i'll do the debug asap and let you know,

thanks

regards

Re: Unable to import ca pairs key on ise node via cli

MaErre21325 — Tue, 14 Jun 2022 09:36:51 GMT

hello @Arne Bier ,

i've repeated the import with the debug activated, i'm able to access the repository, but it still fails with only this message:

Certificate files import from Repo failed, please verify repository settings

no additional information from the debug.

Thank you

Regards

Re: Unable to import ca pairs key on ise node via cli

Arne Bier — Tue, 14 Jun 2022 22:31:56 GMT

I can't say I have ever used this successfully. Just for a laugh, I exported the stuff on a lab node (successful export) and then tried importing the same data back into the node - and it failed. So I don't know what the reason for that might be.

Open a TAC case. Let them help you and fix this if it's broken code.

Re: Unable to import ca pairs key on ise node via cli

MaErre21325 — Wed, 18 Jan 2023 15:22:15 GMT

the problem was that the exported certicate was in a wrong format, i changed its type and the import wa successful