Solved: CA Server?

abhi-adte · ‎01-15-2011

Hi,

I am doing CA server but below error is get.

% Error in receiving Certificate Authority certificate: status = FAIL, cert length = 0

I check: CA server URL, ACLTCP 80 open between ASA, RSA key and check trustpoint, ping is ok.

Please help to solve this issue..

Federico Coto Fajardo · ‎01-15-2011

Hi,

Check your date and time on the ASA and on the CA Server. Make sure they are in sync. If they are not, then there can be problems with getting the certificate from the CA.

Also, did you setup a challenge password when configuring SCEP on your CA?

The command ''debug crypto ca transactions'' on the ASA might also help you see where the problem is.

Federico.

View solution in original post

Federico Coto Fajardo · ‎01-15-2011

Hi,

Check your date and time on the ASA and on the CA Server. Make sure they are in sync. If they are not, then there can be problems with getting the certificate from the CA.

Also, did you setup a challenge password when configuring SCEP on your CA?

The command ''debug crypto ca transactions'' on the ASA might also help you see where the problem is.

Federico.