https://community.cisco.com/t5/security-analytics/security-analytics-appliance-certificate-error/m-p/5013391#M1024 <P>I try to replace appliance identity certificate&nbsp;</P> <OL> <LI>Generated CSR for Manager</LI> <LI>Generated CSR for Collector</LI> <LI>Sent them to OUR CA (DC) (admins did template follow this guide <A href="https://dependencyhell.net/2021/securing-stealthwatch-with-ca-signed-certificates)" target="_blank">https://dependencyhell.net/2021/securing-stealthwatch-with-ca-signed-certificates)&nbsp;</A></LI> <LI>Get CER files</LI> <LI>Upload ROOT CA / Manager cer / Collector cer to trust store</LI> </OL> <P>But when I tried to replace identity for collector I got an error -&nbsp;<STRONG>Your configuration changes are invalid for SSL/TLS Appliance Identity. Uploaded Chain Certificate is either expired or not valid.</STRONG></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="dijix1990_0-1707205377456.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/209682i355A0662845ABFC5/image-size/medium?v=v2&amp;px=400" role="button" title="dijix1990_0-1707205377456.png" alt="dijix1990_0-1707205377456.png" /></span></P> <P>BTW my root CA only has 2048 key length and I don't have any intermediate CA. Can I replace identity without Intermediate?</P> <P>&nbsp;</P> Tue, 06 Feb 2024 07:44:11 GMT dijix1990 2024-02-06T07:44:11Z https://community.cisco.com/t5/security-analytics/security-analytics-appliance-certificate-error/m-p/5013391#M1024 <P>I try to replace appliance identity certificate&nbsp;</P> <OL> <LI>Generated CSR for Manager</LI> <LI>Generated CSR for Collector</LI> <LI>Sent them to OUR CA (DC) (admins did template follow this guide <A href="https://dependencyhell.net/2021/securing-stealthwatch-with-ca-signed-certificates)" target="_blank">https://dependencyhell.net/2021/securing-stealthwatch-with-ca-signed-certificates)&nbsp;</A></LI> <LI>Get CER files</LI> <LI>Upload ROOT CA / Manager cer / Collector cer to trust store</LI> </OL> <P>But when I tried to replace identity for collector I got an error -&nbsp;<STRONG>Your configuration changes are invalid for SSL/TLS Appliance Identity. Uploaded Chain Certificate is either expired or not valid.</STRONG></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="dijix1990_0-1707205377456.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/209682i355A0662845ABFC5/image-size/medium?v=v2&amp;px=400" role="button" title="dijix1990_0-1707205377456.png" alt="dijix1990_0-1707205377456.png" /></span></P> <P>BTW my root CA only has 2048 key length and I don't have any intermediate CA. Can I replace identity without Intermediate?</P> <P>&nbsp;</P> Tue, 06 Feb 2024 07:44:11 GMT https://community.cisco.com/t5/security-analytics/security-analytics-appliance-certificate-error/m-p/5013391#M1024 dijix1990 2024-02-06T07:44:11Z https://community.cisco.com/t5/security-analytics/security-analytics-appliance-certificate-error/m-p/5263186#M1162 <P>Did you have any luck resolving this? We're currently experiencing this on our SNA deployment.</P> Thu, 20 Feb 2025 18:10:08 GMT https://community.cisco.com/t5/security-analytics/security-analytics-appliance-certificate-error/m-p/5263186#M1162 hedge61 2025-02-20T18:10:08Z