Cisco :: Import Certificate Failed For 7925

Jul 24, 2011

I'm currently in the process of the setting up  a new wireless network and I want to test out our 7925 phones on it.  When I try uploading the certificate to the phone it fails and I find the following error in the trace logs
 
[code]...
 
I created this certificate using using Windows Server 2003 and it is 2048 bits.  This certificate works fine with my laptop but I'm unable to upload it to the phone.  The app load currently on the phone is CP7925-MFG-D.8.LOADS.  Are there any specific guidelines out there when creating a certificate for a Cisco 7925 phone?

View 2 Replies


ADVERTISEMENT

Cisco AAA/Identity/Nac :: %ASA-3-717009 / Certificate Validation Failed / Certificate Date Is Out-of-range

Jan 30, 2012

There is ASA with remote access VPN and users are authenticated using third party signed certificates (CA is not local in ASA).When user certificate expires i can see it in syslog messages. For example:
 
     %ASA-3-717009: Certificate validation failed. Certificate date is out-of-range, serial number: (...)
 
I would like to know if there is an opportunity to view user's certificate expiry date beforehand, say, 3 days before?

View 3 Replies View Related

Cisco VPN :: How To Import SSL Certificate To ASA 5510

Jun 3, 2012

Do you know the procedure of import SSL certificate from Godaddy to ASA 5510? attached is the drop-down list that I have to choose from.

View 5 Replies View Related

Cisco VPN :: 871 - Import A Self Signed Certificate

Sep 27, 2012

Can I import a self signed certificate from a Cisco 871 router to a Cisco ASA 5505? The 5505 replaced the 871 and I have a VPN that goes to another company that we have a connect to. The device on the other end is a VPN concentrator ( I do not have access to modify this device without going through multiple channels.) I only need to mimic this device for the site to site VPN tunnel only. It appears that there are no pre-shared keys only a self signed certificate.         

View 1 Replies View Related

Cisco AAA/Identity/Nac :: Cannot Import Certificate To CSACS SE 4.2

Mar 2, 2009

I cannot import certificate from CA (Certificate Authority). When I attempt to install the certificate to CSACS SE 4.2, the following error occurs during installation: "Unsupported private key file format".

View 7 Replies View Related

Cisco Switches :: SPS2024 And SSL Certificate Import?

Feb 29, 2012

I am trying to import a SSL certificate into this device -  Cisco SPS2024 (FW: 1.0.6 ( date  30-Aug-2011 time  15:45:47 )) but without sucess. I have allready did this task on another models through CLI (Cisco SRW224G4 - through the lcli) or on Cisco SG300. I can create certificate request with:
 
switch(config)#crypto certificate 1 generate key-generate
switch#crypto certificate 1 request cn "sw.localdomain" or "..." ou "..." loc "..." st "..." cu "..."
 
and that last command  gives me plaintext certification request that I will sign with my certification authority. to this time, everything is clear and perfect.
 
And now, I have signed certificate according generated certificate request and I want to import it. And now I am in stuck, because I have not found any useful command to do this action. For import certificate, I have found only following command:
 
switch# crypto certificate 1 import pkcs12 WORD
 
also I dont exactly understand this command because there is no parameter to specify any url from which will be fetched pkcs12 certificate... just WORD parameter as the pkcs12 passphrase. nothing like as on another switch models on which there is following command:
 
switch2(config)# crypto certificate 1 import <CR>
 
after executing the command line will waiting for pasting the signed certificate to console. And on SPS2024 there is no any similar command to doing this. So in final, I cannot import certificate signed by my certificate authority, I can just generate self signed certificate directly on device and use only this one

View 2 Replies View Related

Cisco Application :: Certificate Import From Exchange To ACE 4700

Dec 8, 2011

I am tasked to Configure an ACE 4700 for SLB. This has been done and working. Am also further tasked to create a secure communication between tha ACE and Exchange server. I need the breakdown of steps required to Import certificate from the exchange server, and how to verify that things are working.

View 3 Replies View Related

Cisco Application :: ACE 4710 (1) SSL Certificate Import ( 2 ) With Load Balancing?

Dec 3, 2012

I am performing a deployment, in which i require clarity on the following. Our setup has DC and DR , in each site we have two devices for HA.We have received One SSL Certificate from Public CA, Kindly clarify the following doubts i have on thisIn Doc, i found Cert.pem and key.pem is required to generate the pair ,do i receive both Cert.pem and key.pem from the CA or we can generate key.pem from Cert.pem ?SSL Offloading is planned for the X application, and it is running in both DC and DR ( Considering each having their own Public IP address ) , do i need to have two different public certificates or a single certificate can i use in both DC and DR.Load Balancing IssueIs it possible to configure in ACE to access the service in Business hours and in non Business hours to display HTML page showing this is available only during these hours ?In DC we have Three Web Servers ( only in One physical server the service is active, other two are backup ), and these three servers are under cluster and shares one cluster IP , In ACE we have created the VIP and Pointed to only Cluster IP ( like pass through only ). The issue we face is if active web server is down, even then ACE is sending the traffic to that webserver only instead of sending it to the new Active web server. let us know if any solution is there to overcome this issue ?as per my understanding instead of giving cluster IP as real server IP we can issue the three physical servers. now i dont require load balancing between three servers instead require failover king like if first server is down then it should forward to Second server ?

View 4 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.1 Import Template Gives File Format Validation Failed

Sep 21, 2011

Network Resources - Network Devices and AAA Clients- File Operations - Add - gives me File Format Validation Faliled. I am carefull to leave the header as it is. The header in the Import Template looks faulty, see attached. When exporting devices I also get the same header as attached. I also tried to change the header so its all in one column, but with same result.

View 1 Replies View Related

Cisco :: 7921 Certificate Verification Failed

Mar 31, 2009

I am trying to install a digi cert on a 7921 and I get the message on import of "certificate verification failed".as there does not seem to be much documentation with the above error message.

View 2 Replies View Related

Cisco VPN :: ASA 8.2.4 - Client Certificate Authenticate Failed

Oct 13, 2011

I got error message when I convert to certificate authencate via tunnel group.

error message: "certificate validation failure"

client prompte me that "your client certificate will be used for authenticate" but none certificate list popup even i disabled "autpmatic certificate selection" preferences.
 
some information about my configuration :
ASA 8.2(2)4
Anyconnect VPN 2.5.1025
authentication against aaa is working
 
some key point:
ASA:
ssl trust-point remote.apac outside
 
tunnel-group APAC_AnyConnect webvpn-attributes
authentication certificate

View 12 Replies View Related

Cisco VPN :: UC520 SSL VPN Failed To Validate Server Certificate

May 17, 2012

I've configured in an UC520 a SSL VPN.I can access properly and I can see the labels, but I only can access urls which are http, not https:I can access the default ip of the uc520 (192.168.1.10) but When I try to get access to a secure url I get the msg: Failed to validate server certificate I'm trying to access a Cisco Digital Media Manager, whose url is URL Does the certificate of both hardware has to be the same?

View 7 Replies View Related

Cisco :: 7925 Silence Hole On Wi-Fi

Mar 5, 2013

I have an issue with the 7925 phones. We have a Cisco Call Manager with a couple of access points and a wireless lan controller. But  we have at some points some sort of hole in the sound. He doesn't loose  it's connection because i don't hear the beep when he's out of range. And  according to the phone he still has a connection with the access point.  But there is no sound anymore. And if i walk a couple of meters further  i got sound again. If i walk back i somehow get in the same hole and  loose the sound. Further back in i got sound back.
 
I  know when it comes to WiFi that there can be some sort of blind spot but  there isn't. He still has it's connection with the AP. Is there a value regarding de RSSI value that he needs to have to get a normal speech?

View 9 Replies View Related

Cisco Wireless :: IP Phone EAP-TLS Roaming With 7925

Mar 9, 2013

have configured Cisco IPPhone 7925G with EAP-TLS setting. (With manufacture installed and Userinstalled certificate). My issue is while roaming from 1 AccessPoint to another AccessPoint the call getting droped. I need to restart the IPPhone to reauthentiate again. In ACS am agging the authentication time-out error. (I had changed the time out value for EAP-TLS to 20 in WLC as per recommendation.)
 
If am using static web key there is no issue in roaming.
 
What is the reommended setting inorder for the EAP-TLS to work properly.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: 7925 ISE Cannot Run Multiple Signed CA In Store

Jun 4, 2013

Using Sha1 for Cisco 7925g and sha256 for data. Two separate CA's, one EnTrust (SHA1) the other Local Wondows CA (SHA256); ISE can only use one at a time to process a particular protocol (ie..EAP-TLS, HTTP, etc...) As a result we have to have a separate PSN just for Wireless and Wired VoIP (which can only hold SHA1 RSA1024).

View 5 Replies View Related

Cisco :: Wireless Phones 7925 No Voice With Flexconnect

May 22, 2013

We have a problem when I call bettween two 7925 in same SSID, VLAN voice. They cannot hear each other. The SSID and LAPs are in Flexconnet. From desk phones there are no problem and betwen one deskphone and one wireless phone there no problem too.        

View 2 Replies View Related

Cisco Wireless :: 7925 / Refresh Rate For Client Tracking - WCS / MSE?

Mar 14, 2012

I have a customer that have trouble with the update of the position of a client. Even if the clients walks across the whole building, the client will stay at the same place for several minutes. Is there any way to tune the refresh rate? When I push the load button in the map, the clients position will refresh, or it did when I was on the site, now they just test with an application.
 
The setup:
WiSM 7.0.220
WCS 7.0.220
MSE 7.0.220
 
They use the API for MSE to get the location information to the external application, and that will show the information on a cisco 7925 IP phone.know a way to increasing the refresh rate?

View 3 Replies View Related

Cisco Wireless :: Wi-Fi Phone 7925 - Packet Dropped When Roaming Between APs?

Jun 25, 2012

recently we have deployed a Two APs in branch office warehouse and  I have one wifi phone 7925 used over there. the problem is every time when phone roaming from one AP to another, 2 or 3 packets dropped,  following is result of the 'debug client ':
 
--More or (q)uit current module or <ctrl-z> to abort*apfMsConnTask_7: Jun 27 09:52:25.496: 88:43:e1:4f:ab:39 Association received from mobile on AP a0:cf:5b:c3:a8:90*apfMsConnTask_7: Jun 27 09:52:25.497: 88:43:e1:4f:ab:39 10.107.38.121 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1621)*apfMsConnTask_7: Jun 27 09:52:25.497: 88:43:e1:4f:ab:39 Applying site-specific IPv6 override for station 88:43:e1:4f:ab:39 - vapId 14, site 'AKL-AP-GP', interface 'management'*apfMsConnTask_7: Jun 27 09:52:25.497: 88:43:e1:4f:ab:39 Applying IPv6 Interface Policy for station 88:43:e1:4f:ab:39 - vlan 38, interface id 0, interface 'management'*apfMsConnTask_7: Jun 27 09:52:25.497: 88:43:e1:4f:ab:39

[code]....

View 6 Replies View Related

Cisco AAA/Identity/Nac :: ISE 1.1.1 Don't Have Certificate Authority Certificate Anymore?

Oct 19, 2012

i am working on ISE 1.1.1, surprisingly i couldn't found certificate authority certifiate at certificate operation anymore.
 
would it be the change on GUI? So now where i can import the CA certificate to ISE?

View 5 Replies View Related

Cisco Switching/Routing :: 3845 - License Installation Failed With Error / XML Parsing Failed

Jan 19, 2012

I am having Cisco 3845 series router with c3900-universalk9-mz.SPA.151-4.M2.bin IOS . I want to install new Licence on it for DATA. When i am trying to install licence on it  i am facing the error "% Error: License installation failed with error: XML parsing failed".

View 4 Replies View Related

Cisco Wireless :: 7925 Wireless Phone FCC ID

Sep 19, 2010

How to get the FCC ID from a 7925 phone. We have one on order for an upcoming VoFi site survey but I wanted to take a look at the maximum output power by channel so I can begin cell/channel planning.

View 2 Replies View Related

Cisco :: SRX 210 NCS 1.2 Import Third Party MIB File

Feb 21, 2013

I would like to use the NCS 1.2 to monitor Juniper SRX 210 firewall. When I try to import the MIB File from NCS, which show "Error: Failed to load MIB File "mib-802" because it is not in the resource path.what I can upload the MIB File from Juniper. [code]

View 0 Replies View Related

Cisco Wireless :: MAC Import On AIR-CT2504-K9?

Aug 8, 2012

I have 8 2504 controllers and each needs to have a minimum of 20 MAC addresses added. I would rather not add them one at a time but I don't see any features that allow for an import. Any way to do the import?

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 Csv Import Fails

Dec 6, 2010

I'm trying the csv file import and getting some errors.
 
010-12-07 14:23:47: File Format Validation Completed2010-12-07 14:23:47: Import Started

2010-12-07 14:23:47: Record number: 1, Host 01-02-03-04-05-06: Import Failed2010-12-07 14:23:47: null Import process failed for unexpected reason: Unknown error has accurred.2010-12-07 14:23:47: Import Completed With errors

-------- Summary --------Total Number of Records Processed:1Number of Records Failed:1Number of Records Imported:1---------- End ----------Please refresh the table to see the changes.
 
On some other tries I get null field or missing fields.
 
It actually creates the host, but on editing it I get the following message:
 
An unexpected error has occurred. To continue your work, reselect the option in the left navigation bar.If you continue to receive the unexpected error message, close your browser and log in to ACS again.If you still receive the unexpected error message, contact your system administrator or technical assistance.
 
MACAddress:String(64):Required,description:String(1024),"enabled:Boolean(true,false):Required",HostIdentityGroup:String(256),VLAN:String(256):Required,attr-Expiration Date:Date(yyyy-Mmm-dd)01-02-03-04-05-06,AAATest,true,,Guest,2010-Dec-08

View 3 Replies View Related

Cisco :: RME 4.3.0 - Unable To Import IOS From Network

Sep 19, 2011

i tried to import a IOS from a network device into the software repository but the job fails with the following line in the log:
 
sw-10-ed24#
sw-10-ed24#dir /all flash:
Directory of flash:/

[Code].....
 
The chosen protocol ist SCP and the option "Use SSH for software image upgrade and software image import through CLI(with fallback to TELNET)." is enabled.

View 7 Replies View Related

Cisco Switches :: SG200 - SSL Import

Feb 16, 2013

I have an SG200 switch and am trying to import a certificate signed by my own CA.  I generate the CSR and sign it using Java's key tool with my own root cert.  When I attempt to import the resulting cert, the switch blanks out the certificate text box and deletes all of my d name data (CN, etc) from the switch.  What am I missing?

View 2 Replies View Related

Cisco Firewall :: PIX 525 / Failover And Import Configuration?

Mar 27, 2011

I have 2 PIX 525, which one of them, step and active failover mode the other PIX 525, leaving this off, do not know what happened may have been a power outage, but in any case I can turn it back on? And the other question I have is if I can import a configuration that I have saved on my computer. i have the PIX device manager.

View 11 Replies View Related

Cisco :: PI 1.3 Can Install Patch Before Import Data From WCS

Apr 15, 2013

I am migrating WCS to PI 1.3. I read from the guide that we need to migrate to NCS 1.1.1 first and we can get the demo license from Cisco.but the demo license is only 100 unit, but my WCS has 300 license units.How can I import the wcs data to NCS? Besides, I also read from the guide that I need to install patch in NCS before migrating the data to PI 1.3.can I install the patch before i import the data from WCS?

View 2 Replies View Related

Cisco Wireless :: 4400 Mac Filtering Import

Aug 2, 2012

I was wondering if there was a way to import a large number of mac addresses into the MAC filtering of a Cisco WLC 4400. We recently purchased 150 new Mac laptops and I need to add them to the Mac filtering. I have 5 WLC's to do this to.I already have the MAC addresses and names in a spreadsheet.

View 3 Replies View Related

Cisco AAA/Identity/Nac :: ACS V5.2 - Any Limitations On Import Users

Mar 21, 2012

on ACSv5.2...are there any limitations on the number of users that can be imported via CSV file...i.e. will the ACS handle 250,000 internal users for example?

View 1 Replies View Related

Cisco :: Can Import A Config From A 2100 Wlc Into A 5500 Wlc

Feb 14, 2012

I just got a new controller (5508).Is it wise to try to import my 2100 config into the new Hw our should I start from scratch?

View 4 Replies View Related

Cisco AAA/Identity/Nac :: Import Server Certificates On ACS 5.2

Jan 10, 2012

When I tried to import the file, there are two lines there, One is Certificate file, the other is for "Private Key File".
 
My question for you is, is this the private key of CA? My understanding has always been that the private key stays in CA only, not going to any other devices.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: Trying To Import VSAs Into ACS 1113 4.2

Mar 27, 2013

I have some VSAs to import into my 1113 box, but I am stuck before I can even start :-( I have an accountActions.csv file containing some VSAs (this is just a test csv file.) I also have an FTP server that is accessible from the 1113 system.
 
When at the GUI for the 1113 I do System Configuration --> RDBMS Synchronization I get the RDBSM Synchronization Setup screen all right. I have entered all the parameters associated with the FTP server, and selected manual synchronization. The problem is that there are no entries in the AAA Servers window at the Synchronization Partners section at the bottom, and therefore I can't get the 1113 to retrieve my accountActions.csv file, an action that (I guess) is triggered by clicking on the Synchronize Now button.
 
I do have an AAA Server defined in the 1113. It's a RADIUS server called Self, not assigned to any NDG.I guess I do not understand this at all. I just want to import some external VSAs. Do I need to have an external AAA server to accomplish this? If not, how do I get my local Self server to appear in the list of synchronization partners?

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved