Install CA generated cert on 2530

[pauladam76]

Been trying and failing to install certs generated by our internal CA infrastructure (2012r2, offline root and issuing subordinate CA setup)

Im running firmware YA.15.16.0004

Anyway, I have installed the root cert into the "default" TA-Profile and am now trying to install the subordinate into a CLI created secondary TA-Profile (I understand the GUI can only manage the Default TA-Profile).

Anyway, I keep being told that the subordinate cert is an "Invalid Trust Anchor certificate." when I try and upload it with TFTP.

Its definately the right cert, in the right format (Base 64....although I have tried DER too, just in case) - its the same format I used to upload the root cert.

What am I missing!