How to import certificate chain and private key and cert in cisco

[MrBeginner]

Hi ,

i would like to install certificate chain (root and sub certificate) ,private key and certificate for router in under one trustpoint to use VPN. So i conbined private key and certificate as a one pfx file .

i install certificate chain ( root and sub) in my trustpoint using : crypto pki authenticate XXX.

and then i try to import cert to same trustpoint which installed certificate chain.

i got trustpoint insue error.

So let me know how to import certificate chain and pfx file together in one trustpoint ?

Or how to conbine certificate chain,private key and cerfificate as one pfx ?

I would like to use this certificate for VPN. I don't want to generate csr file from cisco router.

[Rob Ingram · Accepted solution]

@MrBeginner try the following:

Use OpenSSL to generate a CSR, private key and then create PKCS12 file

• Type openssl genrsa -out FTD-1.key 2048 to generate a private key
• Type openssl req -new -key FTD-1.key -out FTD-1.csr to create a CSR file

When prompted enter the Country Name, State or Province Name, Locality Name, Organisation Name, Organization Unit Name and Common Name

Get the certificate signed by CA

Import the signed certificate and root cert(s) into a PKCS12 file.

• Type openssl pkcs12 -export -out FTD-1.pfx -inkey FTD-1.key -in FTD-1.cer -certfile RootCert.cer
• Define a Export Password when requested

Import the PKCS12 file on the router crypto pki import <TP NAME> pkcs12

[MrBeginner]

Hi @Rob Ingram 

if we have root cert and sub cert, i need to combine to one cert ?

How to replace RootCert.cer with two cert (root cert and sub cert) in below command ?

• Type openssl pkcs12 -export -out FTD-1.pfx -inkey FTD-1.key -in FTD-1.cer -certfile RootCert.cer

[Rob Ingram]

@MrBeginner concatenate the intermediate certificate and root certificate into a single file and then import.