Server Certificate Key Length

[Matthew Hartley]

Hi,

We have just installed HP Systems Insight Manager and we would like to import our own signed server certificate. Creating the CSR and requesting the certificate from of CA works fine but when we come to import the certificate we get a message 'Error reading file', I think the problem comes from the key length used in our PKI environment.

Our CA's are based on Microsoft Windows 2003, we have a root CA and two subordinate CA's which all have CA certificates with a length of 4096. The certificate I have requested has a length of 2048.

Does anyone have any ideas or workarounds for this ?

Regards
Matthew

[Derek_31]

I was talkin to HP about the PKI problems I've been having, and they said the PSP agents are limited to 2048-bit keys.

Also, currently PSP agents can't import certificates made on a 2003 CA. HP was able to reproduce this problem for me, but hasn't come up with a patch.

I'm not at all impressed with HP's ability to get PKI working across all of their products.

I waited 3+ months for them to get iLO to be able to import Microsoft CA certificates.