Error: Update failed: [Certificate request subject name in keyring firepower_cert cannot be resolved

[oeortiz01]

Hello,

I have a problem creating the CSR on my FTD. when I try to commit an error si show:

Error: Update failed: [Certificate request subject name in keyring firepower_cert cannot be resolved]

FP-4120 /security # create keyring firepower_cert
FP-4120 /security/keyring* # set modulus mod2048
FP-4120 /security/keyring* # commit-buffer
FP-4120 /security/keyring # create certreq
FP-4120 /security/keyring/certreq* # set country US
FP-4120 /security/keyring/certreq* # set state CA
FP-4120 /security/keyring/certreq* # set locality "San Diego"
FP-4120 /security/keyring/certreq* # set org-name "MyCompany"
FP-4120 /security/keyring/certreq* # set org-unit-name Systems
FP-4120 /security/keyring/certreq* # set subject-name anything.MyDomainName.com
FP-4120 /security/keyring/certreq* # commit-buffer
Error: Update failed: [Certificate request subject name in keyring firepower_cert cannot be resolved]
FP-4120 /security/keyring/certreq* #

Im folllowing the guide:

https://www.cisco.com/c/en/us/support/docs/security/firepower-4110-security-appliance/200525-Install-a-Trusted-Certificate-for-Firepo.html#anc6

Anys suggestions?

Regards,

[Marvin Rhoads]

Did you include the following step:

• Configure the CSR fields. The CSR can be generated with just basic options like a subject-name. This prompts for a certificate request password as well.

fp4120 /security/keyring # create certreq subject-name fp4120.test.local
Certificate request password:
Confirm certificate request password:

?

It's mandatory.

[robert.m.schmatjen.ctr]

Does anyone have the real answer to this question that solves the problem?

[kerstin-534]

FXOS does DNS lookup forward and reverse and appens domain-name to subject, does not make any sense

[kerstin-534]

and domain-name cannot be unset, obviously

[kerstin-534]

and the BEST comes. a non resolvable certificate request cannot be deleted, after changing domain name