cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1982
Views
0
Helpful
2
Replies

Error downloading signed certificates file to cisco prime infrastructure 3.6 VM

Eric R. Jones
Level 4
Level 4

While trying to import a signed certificate received from our CA, I received the following error.

ERROR: In downloading signed certificate file yvaprm1totalcert from repository certificates. 

Does anyone know of a document that has a good explanation on how to get CA certs created and uploaded to Prime Infrastructure? Also a good explanation as to which portion of the cert gets uploaded, the top portion, the bottom portion or the entire thing minus the comments?

 

I am using the Admin Guide which, in opinion, explains it straight away; however, I'm getting an error.

I don't believe the cert is the issue but something in Prime, the reason I think this is another oddity where it won't automatically mount an NFS share when running backups but will allow me to cd into the NFS share and use scripts to copy files in and out.

 

ej

1 Accepted Solution

Accepted Solutions

Eric R. Jones
Level 4
Level 4

ok, I got it to accept the cert.

So the way I did it was to:

1. Use the /localdisk/defaultRepo directory to hold the file.

2. Change the name of the file from yvaprm1top t yvaprm1top.cer.

(Note. I used the top portion of the file returned from the CA including the:

-----BEGIN CERTIFICATE-----
Approximately 25 lines of hash
-----END CERTIFICATE-----

3. Follow the directions after the upload.

4. Clear cache on the browser(s) and reload the PC.

 

 

View solution in original post

2 Replies 2

Eric R. Jones
Level 4
Level 4

I did figure out I'm using the wrong directory.

I moved the files to /localdisk/defaultRepo and now I'm getting a ERROR:Failed to import key certificate and then ERROR: ncs key importsignedcert command failed. rval:256.

It may be an issue with the type of file used to import the cert or the naming of the file.

I attached the (dot)cer extension to the file by cp filename filename.cer.

 

ej

Eric R. Jones
Level 4
Level 4

ok, I got it to accept the cert.

So the way I did it was to:

1. Use the /localdisk/defaultRepo directory to hold the file.

2. Change the name of the file from yvaprm1top t yvaprm1top.cer.

(Note. I used the top portion of the file returned from the CA including the:

-----BEGIN CERTIFICATE-----
Approximately 25 lines of hash
-----END CERTIFICATE-----

3. Follow the directions after the upload.

4. Clear cache on the browser(s) and reload the PC.