cut-n-paste cert enrollment with MS 2003 CA

[wgaal1]

Hi

When trying to do a cut-n-paste enrollment of a cisco 3725 router with a microsoft windows server 2003 CA i get the following error on the CA.

Certificate Services denied request 8675 because The request subject name is invalid or too long. 0x80094001 (-2146877439). The request was for OID.1.2.840.113549.1.9.2=rtr31slied3.unit4agresso.com. Additional information: Error Constructing or Publishing Certificate

This is when i use the router or webserver certificate.

The only template that does work is the user certificate but then you get error messages that the router name doesnt match the cert name.

The 3725 is running ios version 12.3(14)T3.

How can we get the right templates to work ?

[didyap]

Try to renew the CA certificate and increase the registry validity period.

[wgaal1]

We already did that.

Before we renewed we got the error that validity of the CA certificate was not long enough to issue a certificate.

And now we get the error as stated in the start post.

[aranyushkin]

I'm getting the same message but I use win2008 CA and IPSec (offline) template. IOS 15.1(3)T1