Cisco PI v3.7 self signed supported SSL certificate format

[teosam]

Dear all, recently my old Cisco PI v3.7 self signed SSL certificate just expired. May i ask what is the supported SSL certificate format e.g. .pem format or .cer / .crt  format? i will be generating CSR from Cisco PI soon.  Hope you can advise me...thank you

[balaji.bandi]

.pem should works :

follow below guide :

https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-8/admin/bk_CiscoPrimeInfrastructure_3_8_AdminGuide/bk_CiscoPrimeInfrastructure_3_8_AdminGuide_chapter_011.html

[teosam]

Thanks @balaji for your prompt answer.
So far I see the normal CSR generation is via command line. There is no documentation stated to use GUI.

[balaji.bandi]

i prefer to do this via CLI easy and you know any errors (apologies that i dont have access to PI to confirm GUI config - since we moved on to DNAC))

cli can do the job - if GUI option you can see in admin guide ( i am afraid you have that option).

[teosam]

Thanks again @balaji

[Scott Fella]

Just to add, typically you want a PEM format, but you can always convert one format to another.  Here is a guide for a wildcard cert fro Prime, but it does have steps to add certs to Prime.

https://www.wiresandwi.fi/blog/cisco-prime-wildcard-ssl-certificate-installation-9kzh5

[teosam]

Thanks @scott for your input.