"Invalid Input" Error When Generating a CSR in VIP Enterprise gateway

Products

• VIP Service

Issue/Introduction

When attempting to generate a Certificate Signing Request (CSR) from the VIP Enterprise Gateway administration console under **Settings > SSL Certificate**, the operation fails with an "Invalid input".

Environment

VIP Enterprise Gateway (VIP EG)

Release : 9.11.x

Cause

The **Common Name** (CN) field in an SSL/TLS certificate is intended to represent the **fully qualified domain name (FQDN)** or **hostname** of the server for which the certificate is being issued (e.g., `gateway.example.com`).

The `@` character is **not a valid character** in a hostname or FQDN.

VIP Enterprise Gateway enforces this standard and rejects any Common Name value containing `@` or other special characters that are invalid in a hostname context, returning the **"Invalid input"** error.

Resolution

Remove the `@` symbol (and any other special characters) from the **Common Name** field before submitting the CSR.

### Steps

1. Log in to the **VIP Enterprise Gateway** administration console.
2. Navigate to **Settings > SSL Certificate**.
3. Click **Add SSL Certificate** and select **Create SSL Certificate**.
4. In Step 1 (**Generate an SSL Key**), locate the **Common Name** field.
5. Enter a valid hostname or FQDN — **do not include** `@` or any other special characters.