cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
549
Views
0
Helpful
0
Replies

IOS CA configuration

msizi.mthembu
Level 1
Level 1

Hello,

 

I am running a virtual lab and wanting to use my Cisco vIOS device as CA server for my SDWAN devices and I just ran into a problem as shown below, I am not sure if anyone has done this here but if anyone can direct me into the right direction on how to resolve this issue.

 

border-router(cs-server)#no shut
%Some server settings cannot be changed after CA certificate generation.

% There was a problem writing 'PKI.ser' to certificate storage.
% Please verify storage accessibility
% and enable the server again.
border-router(cs-server)#
*Jan  7 05:59:49.792: %PKI-3-CS_CRIT_STORAGE: Critical certificate server storage, flash0:PKI.ser, is inaccessible, server disabled.
border-router(cs-server)#

IOS version

border-router#sh ver | i IOS
Cisco IOS Software, IOSv Software (VIOS-ADVENTERPRISEK9-M), Version 15.6(1)T, RELEASE SOFTWARE (fc1)
ROM: Bootstrap program is IOSv
Cisco IOSv (revision 1.0) with  with 984313K/62464K bytes of memory.
border-router#

Config:

border-router#sh run | sec cry
no service password-encryption
crypto pki server PKI
 database level complete
 database archive pkcs12 password 7 0822455D0A16544541
 issuer-name cn=rootca.lab.local
 grant auto
 hash sha256
 database url flash:
crypto pki trustpoint PKI
 revocation-check crl
 rsakeypair PKI
crypto pki certificate chain PKI
border-router#
0 Replies 0

Review Cisco Networking for a $25 gift card