Problem with certificate on IOS

[anandbb]

I have a windows server configured as CA and I am enrolling certificate from the ca on cisco ios and using that certificate for https. Certificate is successfully enrolled but when I am accessing the router ip address https://150.1.7.1 I am getting certificate error i.e website mismatch address, even after including router ip address and subject name in certificate.

[Kasun Bandara]

Hi,

check below steps.

1. have you installed root certificates from your CA in your PC?

2. check the certificated loaded to web browser when accessing the router's gui and check the certificate details are matched to certificate generated from CA.

rate if this helps

KB

[anandbb]

1. Yes the ca certificate is installed on pc browser trusted list.

2. Certificate is issued to 150.1.7.1 but still getting the error "the security certificate presented by this website was issued for a different website's address"

[Kasun Bandara]

have you added IP addresses to SAN list? or DNS name list? in certificate

[anandbb]

Yes I have added the ip address in SAN as well as in subject name.

[Kasun Bandara]

then can be a issue with many other things such as PC date and time, browser, CA mismatching, intermediate certificate mismatch (if any). need to check all of them. if router presents the certificate which you uploaded, that means something is going in PC.

[anandbb]

Time is synchronised between router, pc and ca. Don't know what's the problem.