topic Re: Error: Private Key File is required while import CA certificate on in Network Access Control

Error: Private Key File is required while import CA certificate on ISE

Da ICS16 — Wed, 01 May 2024 03:42:36 GMT

Dear Community,

ISE 3.1 integrate with AD.

ISE certificate is nearly expire so we are testing to perform ISE ssl certificate.

1. We do CSR on ISE

2. Send CSR cert to system team to CA "certificate template and client computer certificate"

3. system team share us the new certificate

We done import on Trust Certificate.

But it is error when import this new cert to "System Certificate" -> message error "Private key File is required".

Please kindly advise and next action to resolve it.

Thanks,

Re: Error: Private Key File is required while import CA certificate on

balaji.bandi — Wed, 01 May 2024 06:19:36 GMT

check the below document - you can verify the cert on your PC using notepad or MMC console.

https://community.cisco.com/t5/security-knowledge-base/how-to-implement-digital-certificates-in-ise/ta-p/3630897#toc-hId--1059765442

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/217191-configuration-guide-to-certificate-renew.html

check some troubleshooting tips - verify the cert - if you have openssl on command line tool

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/217191-configuration-guide-to-certificate-renew.html

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215927-how-to-import-and-export-certificate-fro.html

Re: Error: Private Key File is required while import CA certificate on

Rob Ingram — Wed, 01 May 2024 06:22:49 GMT

@Da ICS16 sounds like you are going to the wrong place, you need to bind the signed certificate.

Navigate Administration > System >Certificates > Certificate Signing Requests, then tick the checkbox on CSR and click Bind Certificate: then select the signed identity certificate.

Refer to the Install certificate section - https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/217191-configuration-guide-to-certificate-renew.html#toc-hId-18233342

Re: Error: Private Key File is required while import CA certificate on

Da ICS16 — Thu, 02 May 2024 06:17:43 GMT

Dear @Rob Ingram ,

After Bind Certificate so no need to import new certificate to "System Certificates"?

It mean no need to import any cert to System Certificates?

Thanks,

Re: Error: Private Key File is required while import CA certificate on

Rob Ingram — Thu, 02 May 2024 07:03:47 GMT

@Da ICS16 no, when you bind the certificate you just select the usage, Admin, EAP, Portal etc. The certificate is then configured for use.