CA server Auth Problem

[sgd729]

hi , i have problem with connecting one device to CA server 

i create trustpoint 

crypto pki trustpoint CA
 enrollment terminal
 serial-number
 subject-name CN=x , OU=x
 revocation-check none
 rsakeypair my.ca.key

but when i paste CSR that i create with cry pki enroll, output is fail in saving cert

im really lost in dark i need serious help about connecting Device to CA server 
please help me! if u can told me what procedure i should go i find my way out

domain active
ssh active
CA accessable
CSR submitable

[Rob Ingram]

@sgd729 Please can you provide the output from the console (screenshot) when you enroll to the trustpoint, so we can see the exact error.

[sgd729]

 

 i think its CA template problem

 

[Rob Ingram]

@sgd729 what order are you entering these commands?

You first run "crypto pki authenticate <TRUSTPOINTNAME> then paste the CA certificate

Next, run "crypto pki enroll <TRUSTPOINTNAME> copy the CSR, get this signed by the CA then run "crypto pki import <TRUSTPOINTNAME> certificate" and paste the signed certificate.

Example

[sgd729]

Thats my problem where should i get CA for cry pki auth , i done one very long time ago i forgot the procedure