Preview Tool

Cisco Bug: CSCuj28351 - ISE complains about DN length when the problem is the format

Last Modified

Jun 08, 2016

Products (1)

  • Cisco Identity Services Engine

Known Affected Releases


Description (partial)

ISE throws "CSR generation failed" with "Invalid certificate subject DN length" when you create a CSR on ISE

ISE should throw a more meaningful error and say what was wrong.

It happens not necessarily when the whole subject is too long but if the format is wrong also
For example if you enter "C=Belgium" instead of "C=BE", you will get this error.
State and country are 2 certificates field that requires code letters and not full name.
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.