topic Re: Error: Update failed: [Certificate request subject name in keyring in Network Security

Error: Update failed: [Certificate request subject name in keyring firepower_cert cannot be resolved

oeortiz01 — Sun, 30 May 2021 00:33:50 GMT

Hello,

I have a problem creating the CSR on my FTD. when I try to commit an error si show:

Error: Update failed: [Certificate request subject name in keyring firepower_cert cannot be resolved]

FP-4120 /security # create keyring firepower_cert
FP-4120 /security/keyring* # set modulus mod2048
FP-4120 /security/keyring* # commit-buffer
FP-4120 /security/keyring # create certreq
FP-4120 /security/keyring/certreq* # set country US
FP-4120 /security/keyring/certreq* # set state CA
FP-4120 /security/keyring/certreq* # set locality "San Diego"
FP-4120 /security/keyring/certreq* # set org-name "MyCompany"
FP-4120 /security/keyring/certreq* # set org-unit-name Systems
FP-4120 /security/keyring/certreq* # set subject-name anything.MyDomainName.com
FP-4120 /security/keyring/certreq* # commit-buffer
Error: Update failed: [Certificate request subject name in keyring firepower_cert cannot be resolved]
FP-4120 /security/keyring/certreq* #

Im folllowing the guide:

https://www.cisco.com/c/en/us/support/docs/security/firepower-4110-security-appliance/200525-Install-a-Trusted-Certificate-for-Firepo.html#anc6

Anys suggestions?

Regards,

Re: Error: Update failed: [Certificate request subject name in keyring firepower_cert cannot be resolved

Marvin Rhoads — Sun, 30 May 2021 02:44:14 GMT

Did you include the following step:

Configure the CSR fields. The CSR can be generated with just basic options like a subject-name. This prompts for a certificate request password as well.

fp4120 /security/keyring # create certreq subject-name fp4120.test.local
Certificate request password:
Confirm certificate request password:

It's mandatory.

Re: Error: Update failed: [Certificate request subject name in keyring

robert.m.schmatjen.ctr — Thu, 07 Apr 2022 07:54:58 GMT

Does anyone have the real answer to this question that solves the problem?

Re: Error: Update failed: [Certificate request subject name in keyring

kerstin-534 — Wed, 12 Oct 2022 14:36:27 GMT

FXOS does DNS lookup forward and reverse and appens domain-name to subject, does not make any sense

Re: Error: Update failed: [Certificate request subject name in keyring

kerstin-534 — Wed, 12 Oct 2022 14:44:45 GMT

and domain-name cannot be unset, obviously

Re: Error: Update failed: [Certificate request subject name in keyring

kerstin-534 — Wed, 12 Oct 2022 14:52:00 GMT

and the BEST comes. a non resolvable certificate request cannot be deleted, after changing domain name