Export CSR from CAS

[alex goshtaei]

Hi All,

we are using NAC 4.1 version. I need to get new cert from provider, so need to export CSR again. I've exported CSR and submitted to provider, but they said the CSR  is 2048 bits and needs to be 1024. I don't see any option in CAS GUI page to specifiy key length when generate CSR.

any suggestion would be very apprciated.

Alex

[Tarik Admani]

Alex,

When you export the private key and the CSR this is based on the current certificate installed on the CAS. So if you want to generate a CSR with a key length of 1024 you will have generate a self signed certificate with a 1024 encryption key. Or you can use openssl to create a CSR on behalf of the CAS.

Here is the guide that explains what i just mentioned:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/411/cas411/s_admin.html#wp1040143

Here is some information regarding openssl:

http://www.openssl.org/docs/HOWTO/certificates.txt

Thanks,

Tarik Admani