Error generating CA Signed certificate from CSR from DX NetOps Portal self signed certificate

Products

• Network Observability
• CA Performance Management

Issue/Introduction

The SslConfig script was used to generate a Self Signed certificate in DX NetOps Portal. The CSR file exported was used to request a CA Signed certificate.

The error returned from the signing authority states:

Renewing - An Error Occurred Certificate Authority returned: 'The public key does not meet the minimum size required by the specified certificate template.', the CSR submission failed.

The key size is 2048 when the authority requires 4096 key size submissions.

Environment

All supported DX NetOps Portal releases 24.3.5 and older

Cause

Current code generates Self Signed certificates using key size 2048.

Resolution

A new release will be enhanced to generate key sizes of 4096. A release this will be included in is yet to be determined. Current as of January 2025.

To resolve this we can follow the Enable HTTPS for NetOps Portal Manually steps. When following the steps to generate the Self Signed certificate we need to change the key size from the documented 2048 to 4096. This is seen in the command at step 2 on the Set Up a Self-Signed Certificate for NetOps Portal page instructions.