topic Trusted Certificate on FXOS Chassis Manager in Network Security

Trusted Certificate on FXOS Chassis Manager

What_The_Hex — Fri, 21 Feb 2020 17:44:32 GMT

Hello All,

I have been working on establishing a certificate between my firepower device and my Windows Server Certificate Authority and have had no such luck.

I have followed the below link

https://www.cisco.com/c/en/us/support/docs/security/firepower-4110-security-appliance/200525-Install-a-Trusted-Certificate-for-Firepo.html

On the CLI of the firepower device, it doesn't seem to like the certificate chain from the Certificate Authority. It is in BASE 64 format and comes straight from the CA certsrv page.

Error Message

Error: Update failed: [failed to verify certificate chain, error: Failed to split certificate chain]

I have the correct I.P, DNS, country, organisation, etc information to generate the key. I just can't get past the above step as i'm getting an error.

Please help

Re: Trusted Certificate on FXOS Chassis Manager

nspasov — Thu, 05 Dec 2019 06:21:08 GMT

A couple of questions:

What version of FXOS are you running?
How many tier is your PKI deployment?
Have you tried to import the certificates individually (root, intermediate, server) instead of the chain?

Thank you for rating helpful posts!

Re: Trusted Certificate on FXOS Chassis Manager

Athees_M — Tue, 28 May 2024 11:04:56 GMT

I have tried to import individually not working. import all certs in single go gives error "Failed to verify X509 V3 CA in certificate chain level 0"