Gosh, I don't remember the specifics of what I did, and I didn't get the 'too short' message, but I distinctly remember that when we got a cert from DigiCert not too long ago, I had to put (I think) the certificate itself and the intermediate authority in one file together, then upload. It was something goofy like that.
Justin Howell Telecommunications Network Technician Solano Community College From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Sichel Sent: Tuesday, June 24, 2008 8:11 AM To: [email protected] Subject: Re: CLEANACCESS Digest - 18 Jun 2008 to 23 Jun 2008 (#2008-105) <clip> I'm trying to renew the certificates on my servers and managers (a high-availability pair). I've tried exporting the CSR and had our manager attempt to import them into Thawte to update but we receive an error saying that the CSR is "too short". Has anyone had any luck getting these certified? I know it's doable - I've done it once before - but I'm lost and Cisco is no help. Any ideas? I do know to use the same certificate on both managers but beyond that it's all for naught. <end clip> This is probably no help whatsoever, but we have exported cert requests to our self signing root certificate server (we use a mixture of Verisign and in house certs), created the request, got the cert and imported it with no issues. I haven't done anything special that I know of except we made a certificate template for clean access that included code signing (we are having a stub installer issue). Our cert server is Windows 2003 R2 Enterprise. Daniel Sichel, CCNP, MCSE,MCSA,MCTS (Windows 2008) Network Engineer Ponderosa Telephone (559) 868-6367
