I am attempting to use ACME to register a letsencrypt certificate per:
https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-asa/222809-configure-certificate-enrollment-with-ac.html#toc-hId-1431558463
I've tried it on several Firepower 1010's and get following in the log (actual url removed):
Jun 27 2025 02:59:51: %ASA-3-717069: ACME Certificate enrollment failed for the trustpoint <aaa.bbbb.net> with CA <acme-v02.api.letsencrypt.org>
Debugs reveal:
PKI ACME[7]: END LOG BUF:
PKI ACME[8]: BEGIN OUTPUT BUF
{"ERROR_CODE":1,"CERT_CHAIN_PEM_TXT":""}
PKI ACME[8]: END OUTPUT BUF:
PKI ACME[4]: ERROR_CODE 1.
PKI ACME[7]: ACME_Enroll() returns -1
PKI ACME[4]: Enrollment failed
The document listed earlier offers "Common ACME Enrollment errors" but does not include anything on error 1 so I am at a loss.
What is error 1?
