cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1325
Views
0
Helpful
0
Replies

Restoring ASA LOCAL CA not working

newtwork1
Level 1
Level 1

ASA 5505/IOS 8.4

I'm attempting to restore the certification authority on an ASA. I installed the original CA server configuration, copied the original LOCAL-CA-SERVER PKCS12 certificate to the ASA, Deleted and made a new flash:LOCAL-CA-SERVER directory, placed the LOCAL-CA-SERVER .ser,.cbd,.ubd, .crl , p12 in the LOCAL-CA-SERVER directory.

when I try to enable the CA server I get an error stating %There was a problem caching the CRL locally.

debugging the crypto CA server comes up with:

CRYPTO_CS: Failed to insert local CRL into cache. status: 1804

CRYPTO_CS: Failed to insert Local CA Server CRL into cache. Status: 1804

Crypto CS thread sleeps!

The sh crypto ca server

status displays disabled, Failed to init storage.

I've attempted to restart the CA server on the ASA several times. I've also rebooted the ASA and gotten the same results.

What are the next steps I need to take? Any thoughts?

Newt.

0 Replies 0