Trusted Certificate on FXOS Chassis Manager

[What_The_Hex]

Hello All,

I have been working on establishing a certificate between my firepower device and my Windows Server Certificate Authority and have had no such luck.

I have followed the below link

https://www.cisco.com/c/en/us/support/docs/security/firepower-4110-security-appliance/200525-Install-a-Trusted-Certificate-for-Firepo.html

On the CLI of the firepower device, it doesn't seem to like the certificate chain from the Certificate Authority. It is in BASE 64 format and comes straight from the CA certsrv page.

Error Message

Error: Update failed: [failed to verify certificate chain, error: Failed to split certificate chain]

I have the correct I.P, DNS, country, organisation, etc information to generate the key. I just can't get past the above step as i'm getting an error.

Please help

[nspasov]

A couple of questions:

• What version of FXOS are you running?
• How many tier is your PKI deployment?
• Have you tried to import the certificates individually (root, intermediate, server) instead of the chain?

Thank you for rating helpful posts!

[Athees_M]

I have tried to import individually not working. import all certs in single go gives error "Failed to verify X509 V3 CA in certificate chain level 0"