pix with ca server

[adrian.watmough]

Help

I am following the documentation but having difficulty getting the pix to authenticate with the Microsoftg ca server.

My debug message is:

CRYPTO_PKI: WARNING: A certificate chain could not be constructed while selecting certificate status

What does that mean????????????

[ciscomoderator]

Often times complex troubleshooting issues are best addressed in an interactive session with one of our trained technical assistance engineers. While other forum users may be able to help, it’s often difficult to do so for this type of issue.

To utilize the resources at our Technical Assistance Center, please visit http://www.cisco.com/tac and to open a case with one of our TAC engineers, visit http://www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.

[cjacinto]

Did you specify your ca server to be ra? ie:

ca configure ca_nickname ra retry_period retry_count [crloptional]

see:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/config/ipsecint.htm