topic Re: SSM On-Prem Server Generating CSR Issue in Network Security

SSM On-Prem Server Generating CSR Issue

WilliamHamilton02800 — Fri, 30 Apr 2021 13:58:18 GMT

I am attempting to stand up a SSM On-Prem server for the first time. It is currently on a test bench connected to a management laptop and a Firepower 2120 supporting an ASA V9.14. I am interfacing via the HTTPS Gui through Firefox with java installed.

I am currently attempting to generate a CSR inside Admin Workspace -> Security -> Certificates however when clicking the actual Generate button nothing is actually happening and I do not see the expected download as per the Configuration Guide. The "Browser Certificate" section also only has the "localhost" default certificate that expires on the date of install.

Is this a known issue?

I'm doing this in order to set up a Trustpoint for my ASA in order to push a smart license to it.

Re: SSM On-Prem Server Generating CSR Issue

WilliamHamilton02800 — Fri, 30 Apr 2021 18:09:30 GMT

Resolving the issue was restarting the Browser and leaving it alone after doing the request. It took about 2mins of waiting on the screen with no indicators before a download started.

Side note for anyone who comes to this later. In order to do the Trustpoint you will need to have a valid Certification on the device. Cisco publishes their certifications everyday with their call home but on a standalone system like SSM On-Prem you need to reach out and get them yourself Here I downloaded the bundle and while most likely overkill, it worked for me.

Re: SSM On-Prem Server Generating CSR Issue

Ben Yosef — Sun, 30 May 2021 11:19:30 GMT

Hi,

I succeeded thanks to your help, but I have another problem

when I'm trying to generate CSR I get this error:

The Common Name in the CSR is not a DNS resolvable hostname or IP address, please try again.

I have an A Record and PTR on the DNS