Can't import SSL Cert to Management Card

[BillP]

I'm trying to generate an SSL key for my Management card.

We have an in-house CA based on Windows Server 2003.

I can generate a CSR just fine & my CA signs it. However, when I then try to use the Import Signed Certificate function I get an "Error Adding Key, code: -2". Who knows what the actual error is.

There seems to be very little additional information on this tool or this process in general. Is anyone actually using this method or are you generating your keys using other tools?

Thanks for any input or advice.
Dave

[Anonymous user]

Hi Dave.

When do you get this error? On the output of the APC Security Wizard when you are importing your signed cert?

Do you know what version of the APC Security Wizard you are using?

I would be curious to know which step this error is occuring. When you are trying to sign the imported cert with the *.p15 file you created when you performed the cert signing request, or is it at the end when it is trying to create the new *.p15 file that will be loaded onto the management card?

Thanks.

[Anonymous user · Accepted solution]

Can you also include what device your are using and what the current management firmware is?

Thanks.

[Anonymous user]

What is the size of the file you are creating. 3000 bytes is the maximum file size that the wizard can handle. If greater than 3000 bytes, perhaps you could try opening the file and see if there is anything that can be deleted, some comments not needed perhaps.

[BillP]

Thanks for the responses.

The certificate file (.cer) is 2116 bytes.

here is all the device info from the About page.

Hardware Factory

Model Number: AP9617
Serial Number: ZA0653001342
Hardware Revision: A10
Manufacture Date: 12/26/2006
MAC Address: 00 C0 B7 2D 38 B6
Management Uptime: 1 Day 16 Hours 38 Minutes


Application Module

Name: sumx
Version: v3.5.5
Date: 05/24/2007
Time: 16:14:52


APC OS (AOS)

Name: aos
Version: v3.5.5
Date: 05/24/2007
Time: 15:44:22


The security Wizard is at version 1.01. I am getting the error when I select "Import Signed Certificate" after I choose the name of the new file to create (.p15) and hit Next.

If you would like, I can give you the files in question.

Dave

[BillP]

Craig at APC hooked me up with a new version of the Security Wizard.
Thanks for all your help!!!
Dave

[Anonymous user]

I have APC Security Wizard 1.01 and am having a similar problem when I try and import a certificate, probably because it is over 3000 bytes. Can you point me at this later version of Security Wizard? I cannot find a later version than 1.01.

[Anonymous user]

Version 1.0.2 should be available off the main downloads page now:

http://www.apcc.com/tools/download/software_comp.cfm?sw_sku=SFNMCSECWIZ102&id=202&family=&part_num=&...

Please let me know if this corrects the import problem you are having with the 1.0.1 wizard. If you still are having issues can you give us some more info:

What are you using for a CA?
What device and what version of network management card firmware are you running?

Thanks.

[Anonymous user]

Oh, and the 3,000 bytes is a limitation on the card, not the wizard.

The network management card can only upload a cert up to 3,000 bytes,

The wizard does not know/care about the file size currently.