I have an SSL VPN running on a 3825 router. The VPN works fine no issues. Right now it has a self signed cert on it. Our company bought a wild card cert from godaddy. It was requested and generated from another server. I asked Godaddy how to put that on the router, when the router is not the one that generated the key. They said the server where it was installed should export it to a .pfx file and I could install it then.
Well I have the pfx file but I cannot figure out how to install it. I have tried a number of different ways. Most of the documentation I have found says to create a trustpoint and then import it.
So I put the .pfx file in flash.
I create a trustpoint "crypto pki trustpoint godaddy", I've tried every different "enrollment" option after that
Then I try to import it and get an error every time. I have tried importing from flash and from tftp. No matter how I do it, it ends up like this
sslvpn-3(config)#cry pki import godaddy pkcs12 flash: password99
% Importing pkcs12...
Source filename [godaddy]? wildcardexportcert.pfx
Reading file from flash:wildcardexportcert.pfx
CRYPTO_PKI: Import PKCS12 operation failed, failure status = 0x711
I have 2 routers with the vpn on it and got the same result, so clearly I just don't know how to do it. I have installed certs a number of times when the router was the one that created the key, but I have never used a wildcard and a .pfx before.
Can anyone help me out?
