Certificate Services Support

For Cisco ACS

Problem:
You are generating a CSR (certificate signing request) with Cisco ACS through your ASDM 5.2 ASA interface, submit your CSR and receive the message that there was a problem creating your certificate or invalid CSR (PKCS10).

Here is the Solution: 
When generating the CSR, (from trustpoint) please add in the distinguished name sequence to appear in order as follows:

CN, O, C

CN is the common name value

O is the Organization name value

C is the Country code value (2 letter ISO)

Do not use Subject Alternative Name fields.

This will create a valid PKCS10.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance: 

Hours of Operation: 
Sunday 8:00 PM ET to Friday 8:00 PM ET 
North America (toll free): 1-866-267-9297 
Outside North America: 1-613-270-2680 (or see the list below) 
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.