topic pix with ca server in Network Security

pix with ca server

adrian.watmough — Fri, 21 Feb 2020 06:04:11 GMT

Help

I am following the documentation but having difficulty getting the pix to authenticate with the Microsoftg ca server.

My debug message is:

CRYPTO_PKI: WARNING: A certificate chain could not be constructed while selecting certificate status

What does that mean????????????

Re: pix with ca server

ciscomoderator — Tue, 28 May 2002 17:37:36 GMT

Often times complex troubleshooting issues are best addressed in an interactive session with one of our trained technical assistance engineers. While other forum users may be able to help, it’s often difficult to do so for this type of issue.

To utilize the resources at our Technical Assistance Center, please visit http://www.cisco.com/tac and to open a case with one of our TAC engineers, visit http://www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.

Re: pix with ca server

cjacinto — Wed, 29 May 2002 02:55:04 GMT

Did you specify your ca server to be ra? ie:

ca configure ca_nickname ra retry_period retry_count [crloptional]

see:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/config/ipsecint.htm