cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1333
Views
0
Helpful
3
Replies

How to export the system certificate with the private key from DNAC?

mattw
Level 1
Level 1

Hello!

I'm currently in the process of setting up a DR (1+1+1) setup for a client. I've created the CSR from DNAC01 (with all the required FQDNs and IPs in the SAN), got it signed by their CA, and imported the signed cert into DNAC01. Tidy.

Problem is, I need to export this cert, with the PVK so that I can import it into DNAC02 as they need to use the exact same cert. Any idea if this is possible without going via TAC?

Thanks in advance!

3 Replies 3

Sidney Cheng
Level 1
Level 1

Hi Matt

I have the same problem. Were you able to resolve it or it has to go through TAC

Thank you

 

mattw
Level 1
Level 1

Hi @Sidney Cheng,

No, I wasn't able to export the cert with PVK from DNAC01. In the end I used a random Linux server to generate the PVK and CSR using openssl, got it signed by the CA, then created a PKCS12 on the Linux server and imported that into both DNACs which worked fine.

Hope this helps.

thank you

Review Cisco Networking for a $25 gift card