I am trying to get PNP working via APIC-EM/Prime and I need to replace the local cert with one than has the FQDN as a SAN.
I've tried to create the request on the APIC itself, but it tells me that the keyfile is the wrong format. I created and submitted a CSR to our internal CA, and combined both the root and issued cert into a PEM file, but it tells me it can't validate the cert hierarchy. I'm at the end of my rope here. Running APIC-EM 1.6.4.30024.