vManage Install Root CA got Error org is missing

[MM15]

Hello, has anyone encountered this problem? I installed Root CA on vManage 20.9.5.2 and tested it by creating it from vManage, openssl and xca and got the same error.

openssl req -x509 -new -nodes -key ROOTCA.key -sha256 -days 730 \
> -subj "/C=US/ST=CA/L=San Jose/O=sdwanlab.local/CN=vmanage.lab" \
> -out ROOTCA.pem

[balaji.bandi]

never had any issue like this in my Lab or in production environment :

also check below thread to help you :

https://community.cisco.com/t5/sd-wan-and-cloud-networking/vmanage-certificate-failure/td-p/3935663

[Kanan Huseynli]

Hi,

this doc describes how to create CA inside vManage. You have to be prompted to enter some information including organization name and organization unit name. Looks like they are missing and certificate is not accepted.

https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/215103-how-to-generate-self-signed-web-certific.html

[noc@westernasset.com]

Hi, I am facing the same issue. May i know how did you solve this issue. 

[bryannsofu]

I have the exact same problem, I tried everything I could think of, deleted and reinstalled multiple times, nothing worked. Please let me know if you solved the problem, and how?

[balaji.bandi]

what is the error you getting what version vmanage ?

can you post more information, also give information that what document you followed.

[bryannsofu]

Hi I get the error message that org is missing.
I’m running ver 20.9.5

[balaji.bandi]

Organizational Unit is a noneditable field. This field is auto-filled with the organization name that you have configured for Cisco SD-WAN Manager in Administration > Settings > Organization Name.

check the blog and instructions :

https://www.balajibandi.com/?p=2028

You can follow official document :

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/manage-certificates.html

[Kanan Huseynli]

Also,

under conf t > system you should have organization-name and sp-organization-name commands with respective org-name for all controllers.

[bryannsofu]

I did the same as below;

vManage# sh run sys
system
host-name vManage
system-ip 7.7.7.107
site-id 1
admin-tech-on-failure
no vrrp-advt-with-phymac
sp-organization-name org_Lab
organization-name org_Lab
vbond 10.10.1.106