The Error installing SSL certificate parse error is displayed during SSL certificate installation on the VPN 3000 Series Concentrator with software version 4.2

[TCC_2]

Core issue

This parse error is displayed if the VPN concentrator does not have a root Certificate Authority (CA) certificate installed.

Resolution

Regardless of whether Simple Certificate Enrollment Protocol (SCEP) or manual enrollment is used, the VPN concentrator must have a root CA installed if third-party certificates are used. In order to obtain and install the Secure Socket Layer (SSL) certificates, perform this procedure:

1. Obtain and install the root CA certificate.      
2. Create an enrollment request for one or more identity certificates.      
3. Request an identity certificate from the same CA that issued the root CA certificate.      
4. Install the identity certificate on the VPN concentrator.      
5. Enable Certificate Revocation List (CRL) checking and caching.      
6. Enable Certificates.  

Ideally, this procedure resolves the issue. Refer to Certificate Management for additional help on certificate enrollment.