We are having a problem installing an SSL Certificate from GeoTrust in our Cisco 1811 for VPN AnyConnect to use. The Instructions seem about the same for Cisco router IOS and ASA but we are having problems installing the intermediate key. All the documentation I find says to "just install the intermediate key first". But I'm afraid I don't understand what that means, trying to apply the intermediate key seems to change nothing.
Here's the order we are trying using the following commands:
crypto ca trustpoint VPN-Trustpoint
enrollment terminal pem
crypto ca enroll VPN-Trustpoint
---Generated the CSR ---
crypto ca authenticate VPN-Trustpoint
---Placed Root CA here with brackets---
crypto ca import VPN-Trustpoint certificate
---Pleaced Cert here with brackets---
And get the following error:
% Failed to parse or verify imported certificate
valid cert path not found (reason: 18) ../VIEW_ROOT/cisco.comp/pki_ssl/src/ca/provider/path/pkix/pkixpath.c
If I try the Intermediate key in place of either the CA or certificate I get the same error. What is the proper order/commands? Any thoughts or hints would be greatly appreciated!