cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
545
Views
0
Helpful
0
Replies

Enterprise CA CSR fields - what should be configured

richwood
Level 1
Level 1

Hi,

 

I'm setting up a lab environment, and have everything working now with an openssl Enterprise CA, but came across an issue that I was not able to resolve.

 

If ANY changes are made in Administration->Settings->Controller Certificate Authorization->Enterprise Root Certificate->Set CSR Properties, any attempt to generate a CSR will fail.

 

This is on 19.1 release.

 

Is this simply a bug, or is there some special values that MUST be set in these CSR fields, and if so, what must they match in the Enterprise root CA chain values?

 

The Enterprise CA works, and all CSRs and certificates generated for the controllers have the following fixed values, which do not appear to be possible to change:

C = US,

ST = California,

L = San Jose,

O = Viptela LLC,

OU = ******, (my OU appears here)

CN = vmanage-****-0.viptela.com, (my chassis-num/unique-id appears here)

emailAddress = support@viptela.com

 

Or is there something else that I'm missing...

 

Any assistance on this would be much appreciated, thanks in advance.

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: